I agree with both sets of comments. The point to underline is that it's no longer just a transaction-based environment where we exchange personal information for a particular transaction. Many of us go online in the morning and stay online all day. We carry around smart phones; many of us have the location-enabled option on them for various reasons, which reports our movements.
It becomes a seamless thing. You have all of these different programs interacting with each other, and data being collected and shared in contexts where people are so used to using these different programs or applications, or interacting in certain ways, that to even go to the privacy policies is not a normal or automatic reaction.
Yet, things are happening that we're not aware of and that we might not consent to were we aware that they were taking place. I do think it changes the paradigm, and the legislation needs to respond to that.