The Data 3 Laws - not even half the story

So-called data stores

Companies and institutions can now legally buy and sell personal information

If in the past companies collected information themselves and consumed what they collected themselves - a slightly shadowy channel - and that collected personal information could become nourishment for the company

then after the Data 3 Laws, companies can pay money and legally purchase personal information

This is not personal-information protection but information-led personal-data trade - in other words, nothing to do with protecting the individual, and merely a formalization of the surplus-income capture that comes from transactional activity

Just as real-estate transactions or taxation assume transparency of transactions but have nothing to do with individuals' lives, the Data 3 Laws also have nothing whatsoever to do with personal-information protection or data democracy - they only

presuppose transactions within the so-called government's surveillance net

Is the purpose transparency of transactions? Is the purpose personal-information protection? Is the purpose illegitimate? The Data 3 Laws - unclear either way