Absent laws the average user can’t reasonably know what information they are giving up. Sure, stuff like Facebook posts should be obvious (though recent research says it isn’t actually known by most people), but a lot of the information stored on you is a black box. I can’t know what some data broker with a tiny tracking pixel on a million websites has been able to collect about me if I never find out they exist. You don’t need the laws to cover every eventuality. You need them to cover a broad swath of risk.
You would be well justified not to trust them. We’ve had recent breaches of census privacy. https://epic.org/privacy/census/foia/
