A step in the right direction but until there are more robust privacy laws in place, this will not go away.
If their gov is restricted on buying from data brokers, are other governments, foreign entities?
The inherit issue is the American's data can be harvested and sold. Setting up legal restrictions toward certain entities will just cause those entities to "legally self identify" as another entity. Or do business with an entity that is allowed access to American's data.