Earlier quoted context omitted.
Nothing short of inquisition-style inspections of company servers, code, and networks is going to fix it on that front. We'll have to do some really radical invasions of company privacy before it results in more than fines-as-a-business-expense.
Not really, you just need to incentivise the behaviour. Pass a law to make it illegal to show ads based on tracking, with executive imprisonment for violations. Executives will then demand their teams to put controls in place to ensure that no one is using tracking to show ads. Violations of HIPAA have some serious fines, and I've watched executives at all levels take it VERY seriously
Something like APPAA - Advertising Privacy Protection and Accountability Act
What would you guys call it? what language is necessary to cover all the edge cases for the deceptive and dirty-playing advertising industry?