Is it Actually Possible to Pass Laws to Protect our Data?

A question for Shira Ovide

Hi! My name is Lucas MacCallum. I read your article “The Best Law You’ve Never Heard of”, and I wanted a but of clarification on some things. In the article you said that you thought that smaller laws could be created (much like BIPA) in order to hinder big tech’s ability to steal or data and use it. However, in other articles I have read, it has been said that the big tech companies and the government are in more or less a mutually beneficial relationship involving our information. What kind of limitations might this place on the probability that there will be similar laws to BIPA that will protect our online information?

Is there something special about these types of smaller laws that could bypass this seemingly corrupt duo?

I would be genuinely interested in how that process would potentially look.

Thank you so much!!