It is illegal, but they have to be held accountable for it to matter.

The government isn't equipped to handle the massive amount of data collecting going on, legal or not. There's just too much and they are so far behind the ball on tech related stuff it's laughable they even try to pass laws against it.

Even when they do try to step in, companies will end up paying someone off or already have someone important in their pocket so nothing happens anyway.