Regulatory capture, bribes (AKA lobbying), a culture that devalues privacy, a culture that places corporate rights over individual rights, a culture that doesn't like sane limitations on contracts, etc...

So long as Google is an 800B behemoth who invests more than anyone else in lobbying, monetizing customer data (and sucking up massively more data than needed) is going to be legal.