The problem is even if you got the legislature to pass that privacy bill (they never would, at least not without 1,000 exemptions that every large company would qualify for multiple times over), it would just get repealed a year or two later with little fanfare.

The only answer is to make this kind of thing illegal at the level of the state constitution and/or federal case law, at least until we bring back tarring and feathering government officials who violate their oaths.