How about passing a law explicitly covering the kind of information being collected and sold as actually being private, and against the law to share with anyone without a warrant?
These data are probably legally collected and sold, as mentioned in page 573 of the terms and conditions users have agreed with.
Except that it's not how EULA do work. If it's made illegal by law (which GP suggess), then lawyers writing these EULAs can write anything they want in fineprint: it's not superseding the law.