You can enact all the laws you want, but what do you do when the government in charge just ignores them?

You can increase your chances by crafting the laws differently, at least.

A law that says the government can't ask for this stuff doesn't help very much. They'll ignore it when it suits them.

A law that says it's illegal for private companies to hand it over would be better. When caught between a request from the government and a law that says they're not allowed to honor that request, there's a good chance they'll obey the law rather than the rogue agency.

A law that says it's illegal for private companies to collect this data in the first place would be even better. It could still be worked around, but it's more likely to be uncovered, and they'd only get data after the point where they convinced a company to start collecting it.