It being for sale means anyone can be doing it which might be a framing that would be more alarming to the law-and-order types.
But really you need a two prong solution:
1) restrict this from being collected and compiled in the first place, eliminate the ability to default to this tracking unless someone opts out
2) restrict the government's ability to use or acquire through non-market-based means. The claim here is that there's already restrictions on this vs directly surveiling, but I haven't seen directly which specific restrictions those are for buying off-the-shelf info and the article doesn't specify.
There are very really no companies that I trust to keep my data safe for 10, 20, 50 years. Leadership changes, ownership changes, etc. We have to cut it off at the source.
That's why information in government hands can be more dangerous than in corporate. A good example is when Nazis occupied Holland they used governmental data on religion (collected to properly allocate funds for places of worship) to track jews and send them to the camps.
So data in corporate hands is bad, but governmental data can be even worse.
Let me tell you what companies can do: they can make lists and pass it privately around to deny you gainful employment, loans, investment, etc. They can also sell it to the government, subverting privacy and due process rights.
If you are hiding information that would cause people not to do business with you that is almost fraud.