I really believe that there is a causal connection between me buying drugs at Walgreens and receiving spam for the same drugs - what would be great would be to expose them, sting them some way, and apply some legal force to it.
There must be lawyers around who specialize in this sort of thing. I know nothing of the front lines in the war for privacy - you seem to know a great deal.