I think we need to do two things:
The US government needs to take a more active role in coordinating hardening of infrastructure, including the networks of private companies. This is analogous to the safety regulations the USG puts on car and airplane manufacturers, chemical plants, etc. This is a case of technology outrunning regulation, plus a dash of Alan Greenspan’s “flaw in my model” thinking that the market will optimize around security.
Second, companies need to be held legally and financially responsible for the data breaches that occur. This would open up an insurance market, which would be motivated to audit the companies accurately in order to set rates.
Honestly, I think we’d be better served by having a department of cybersecurity than a Space Force, since right now there’s only spotty coverage divided among the various intelligence agencies.
I believe that’s not the law though. The law outlines the conditions under which a person has an “expectation of privacy.” If you’re inside your house, you have an expectation of privacy and so should not be filmed. If you’re on the sidewalk in public, you have no expectation of privacy. If you’re in a private establishment (restaurant or store for instance), the owner or their representatives can ask you not to record and you have to comply.
All of street photography depends on this kind of legal framework.