The idea that business should be allowed to collect everything, and that only use should be regulated is nonsense. It is difficult, but perhaps not impossible, to tell what has been collected. But once data is collected, those holding it can make it impossible (if they want to) to tell what has been done with it. Collection is the only possibly feasible place to draw the line. If we don't draw it there, we are simply agreeing that privacy is dead.