I don't really understand how forbidding Facebook and Google selling and buying personal information will prevent any other bad actor collecting and using it.
Even naked man example used in this article doesn't make sense in this context.
The solution is not legal, but rather technological.
While people can and do act illegally, its more difficult to base some of the largest companies on earth on a root of completely illegal activity.
Facebook and Google have completely unrivalable empires of data that hundreds of thousands of employees work every day to perfect and extract conclusions from, scale matters here, and its a lot harder to scale up a completely illegal enterprise.
Even naked man example used in this article doesn't make sense in this context.
The solution is not legal, but rather technological.