Sale of data should be opt-in, not opt-out. Companies will find a way to go around this and we’ll have to catch up again, but it would be a good next step.