It should be illegal to send the data, and illegal to accept it; burn both sides of that bridge.
At least make it an explicitly protected right to lie about your race in any context. It's a lot easier to ruin a dataset than it is to hide from it.
It's a tracking pixel. They fool you into sending it.
I wouldn't be surprised if both are illegal. But these days, the correlation between "X is illegal" and "larger org's do not do X" just ain't what it yousta be.
Well the tech companies/offense contractors are probably using it to enrich the department of wars efforts. Hmm I wonder what they want race and citizenship data for? Ohhh... Oh...
Why would politicians ever pass such a law? Who do you think they work for?
update: Yeah, my bad. The point of this comment was to express my increasing cynicism at how we just keep seeing this kind of corporate behavior over and over again and how even when a tiny win is achieved on things like data collection, right to repair, ease for cancelling subscriptions, privacy, and so on and so on, they are so quickly over taken by new tactics or clawbacks/loopholes/non-enforcement of those laws. HN comments was probably the wrong place to vent and its too late to delete it.
Every piece of data collected should be an opt-in both for the initial collection and any sharing to a third party. There should be an explanation for why it is collected and an explanation for what features are not possible if it is not collected. It should be a violation of the law to disable a feature based on failure to opt-in for data points that aren't absolutely necessary for the operation of that feature.