One useful regulation might be to prevent neutering the functionality of a product if the user does not elect to share their data. Unless those data are part and parcel of the core functionality, choosing not to share should not prevent receiving software updates, etc.