I would start with the fact that data, including personal data, is necessary for economic development, economic growth and for the social good. We're not saying that data should not be used. It is the way of the 21st century. It is the way of the future.
However, the fact that data can be used for good, of course, does not mean that it is always so. We have seen many cases over the years of data used against the interests of individuals. Think of Cambridge Analytica, for instance, and the link to democracy.
The framework needs to allow for flexibility and innovation in the use of data for legitimate commercial interests and the public good, but within a framework that protects privacy as a human right, enforced by a regulator who can audit or investigate to ensure that, in individual circumstances, the data indeed was used correctly or not, and when not, there should be consequential penalties for players, corporations, that have violated the law.
Essentially, that is the framework that we have.