What people have "willingly" given their data directly to any company? It's usually buried in an agreement or hidden behind some dark pattern.

Suing your government generates results. Suing a company usually results in it shedding it's shell corporation and taking it's assets where you can't get them.

Selling user data needs to be a federal criminal offense. You need to go to jail for doing this. You need 15+ years in prison for doing this or enabling this in bulk. Let's start talking asset forfeiture next.

Exactly. Most people just don't know how much data is being collected on them, and probably can't know at this point. I say can't because the reality sounds so much like a conspiracy theory that a majority of people would simply reject the truth outright.