Our laws should protect us, not our data dealers