They need a tech ethics board, and people need a license to operate or work in decision-making capacities. Also, anyone above the person’s head making an unethical decision loses their license, too. License should be cheap to prevent monopoly, but you have to have one to handle data. Don’t have a license. Don’t have a company. Plant shitty surveillance without separate, noticeable, succinctly presented agreements that are clear and understandable, with warnings about currently misunderstood uses, then you lose license. First offense.