wow 10 months flew by since this was posted and since then the United States had a surprise privacy bill that is bipartisan that sort of addresses the issues you and I mentioned. https://www.washingtonpost.com/technology/2024/04/07/congress-privacy-deal-cantwell-rodgers/

This bill was proposed around the same time the TikTok ban was announced. I speculate that law makers had a difficult time framing the arguments against TikTok when “the data of citizens have no protections so there was no easy legal grounds to forbit the likes of TikTok to harvest it”

From what I’ve heard, this bill is pretty good. I need to educate myself more on it, however.

A step in the right direction but until there are more robust privacy laws in place, this will not go away.

If their gov is restricted on buying from data brokers, are other governments, foreign entities?

The inherit issue is the American’s data can be harvested and sold. Setting up legal restrictions toward certain entities will just cause those entities to “legally self identify” as another entity. Or do business with an entity that is allowed access to American’s data.