As an idea, sure, but then how do you operationalize and police it? How do you make sure the companies are actually complying with the legislation?
They've done a poor job of complying with 20-year-old privacy laws. What's going to make this any different or any better?