You are correct. My brain was on the $600 transaction monitoring that someone had brought up.That’s quite the oversimplification about what is requested and not even a correct assessment of what they are asking.
The government is not overreaching when they are asking businesses their operations about data mining and the information those businesses are gathering.
You’re missing the part where “private property rights” started with entering your credit card information on the phone, and it is more than reasonable to be concerned about what a few companies do with that information.