With enough aggregate data points to the intersectional interests of enough people, anyone is capable of identifying individuals. The “anonymous data” that is legal to sell is trivially de-anonymized. This has been known for nearly a decade, US privacy laws have failed to update privacy standards in light of this, and companies tend towards the optimal and cost effective solution (read: cheapest and minimum required).
With enough aggregate data points to the intersectional interests of enough people, anyone is capable of identifying individuals. The “anonymous data” that is legal to sell is trivially de-anonymized. This has been known for nearly a decade, US privacy laws have failed to update privacy standards in light of this, and companies tend towards the optimal and cost effective solution (read: cheapest and minimum required).