Someday ordinary Americans may want to consider getting something similar to GDPR in place? Companies in the US are abusing the public's data and privacy in so many ways.

These things always result in victim blaming "you shouldn't post your data", but even if you don't it's legal for anyone to collect and sell your data. You can't protect yourself without better consumer protection laws.