It’s hard to enforce a law so we should not have the law seems a poor argument.

Let’s say we define personal data about, generated by or inferred from the actions of a natural person as owned by the society as a whole. And misuse is liable to 5% of annual turnover. It’s more or less GDPR. That seems viable - and I am sure an army of class action lawyers will be happy to help out

(Ok I need to work on a better proposal but I think this is more doable than you are allowing for)