I think we need legislation. The "no expectations of privacy" probably was ok when little old ladies were spending time outside their home watching passerbys, but not when everyone's movements are tracked and saved by fully autonomous systems.