The sale of personal information should simply be illegal.

Handing over data from one company to another for processing reasons should be subject to individual, written and signed permission of the person who's data is moved.