So$,$ how could this $$bulk personal data$$ be collected? The simplest approach is to get Americans $($or citizens of other countries$)$ to use apps $($e$.$g$.,$ TikTok$)$ that provide sensing information back to the provider. As a result, the private sector has attribution powers greater than most law enforcement agencies, and indeed law enforcement agencies, intelligence agencies, and militaries are sometimes reliant on the private sector in order to accomplish their missions.

So$,$ this is bulk personal data; it has been anonymized, and it does not contain any PII. Is there really a problem?

What if this bulk data was purchased by a state$-$sponsored terrorist organization $($likely purchased through a series of shell companies$)$ that tracked movement through a subway system.Allowing the terrorist organization to optimize the time when a cyberattack would disable the greatest number of passengers, stranding them on trains, to ensure optimal effect when a subsequent kinetic attack ensues.Is this scenario plausible?

Has the sale of private sector data created any impact in the $$real world$$ or at your place of employment?

Is the sale of private sector data creating an impact in the $$real world?" Is it a possibility in the future?