Comment by eivarv

It already is – in national constitutions, and both the EU and UN definitions of human rights.

The issue is with enforcement. Lots of today's data collection, sale and use is illegal (often patently so).