Unless privacy is enforced via legislation -- something that seems tremendously unlikely -- I don't think we will have any; data brokers are out of control.
The EU is surely working on that. They're getting a lot of flak for the cookie walls and AI legislation. But the cookie walls were because they gave the industry too much leeway. They should have mandated that the DNT flag be respected and there would have been no issue. Just set the flag (even set by default is fine because tracking must be opt out) and you're done with tracking forever. But they had to kowtow to the industry. And get the flak for the result.
And for the AI rules it's precisely to prevent another status quo that's hard to turn back once it happened like the ad tracking.
The problem with privacy is that it's too late by the time harm occurs, but prior to that, there are too many other immediate issues on people plate to care.
