The data-brokerage business is so lucrative because it’s so easy. There are scarcely any limitations on who can sell information, who can buy it and who can sell it all over again. Any thoughtful federal privacy legislation would restrict the data that companies can collect from consumers