Or we need to focus on making data brokers illegal, period. Taking a page from the GDPR would be a good start. As long as the surveillance databases continue to exist, they will be juicy targets for anyone attracted to the power. And not just for the de jure government, but also plenty of "private" businesses that adopt them nearly in lockstep. If you get blackballed in the one used by say Target, it's not like Walmart is going to make it a point of competition to serve the small fraction of people who would be good customers but for getting tripped up by Target. Rather they will all use the same databases, shutting you off from most commerce. That's effectively creating a de facto government, independent of any de jure government adoption.