[pronlover723]

I don't know where to draw the line but I feel like maybe one line would be a business can not share data about me with anyone else. They can use it to help their own business directly but can't share it with another business for any purpose.

As an example, there was (is?) a law that a video rental store can't share your rental history.

https://en.wikipedia.org/wiki/Video_Privacy_Protection_Act

Unfortunately I suspect that law didn't carry over to Netflix/AppleTV+/Hulu/Amazon/PornHub viewing history nor did/does it apply to purchase history like say Patreon/OnlyFans, etc...

I'm sure that limit is problematic as well. Various companies might want to hire a 3rd party to do data analysis. Should that be allowed? What about a service like Office 365 where there are 3rd party apps?