Are there ANY limits on what data is collected and sold on Americans?

In this article by the Washington Post entitled "ICE Investigators used a private utility database covering millions to pursue immigration violations", I started to go in an entirely different direction: what little the "Privacy Act Of 1974" actually does to protect everyday Americans and their data from being re-sold for profit to anyone? Turns out that not much is beind done, actually.. Listen for details on what's being collected and how Federal Agencies are circumventing the "Privacy Act Of 1974". The real question is, should all this data on Americans like you or me be profitized and re-sold to anyone for any use?
The coffee-talk article link I mentioned is here: https://www.studyfinds.org/too-much-coffee-heart-disease/