But some government agencies, including Immigration and Customs Enforcement and the FBI also rely on data brokers to get around surveillance restrictions.

Well, exclude those agencies. Obviously.

The best time protect personal data was 20 years ago. Why is someone just now thinking of this?