How about passing a law explicitly covering the kind of information being collected and sold as actually being private, and against the law to share with anyone without a warrant?
The NSA doesn’t follow the law, so why would that matter?
Them following the law is entirely downstream from Congress doing things like what Wyden is doing. Their existence is predicated on congressional satisfaction, and many congresspeople are at least fellow travellers to the practical frustrations many people on this site have with the NSA. It's never enough, but it's _something_.
Meanwhile plenty of countries just have their intelligence services tucked away, out of the spotlight, and with barely any legal framework to bind them.