It’s important to understand that in the USA, data is owned by the collector (eg. The app or SaaS who generated it), not the person who is described by it.

Until this legal regime changes, we will constantly be playing whack-a-mole with laws like this.