Easier solution: death penalty for coporations that violate more than they create.

Even if you do that, if someone who is in the Metaverse takes your picture and uploads it, it ends up in the training data.