Comment by fsflover

The third (and the best) option is to outlaw private data exchage with no consent and strictly enforce this with fines. See: GDPR.