But "[m]ass personal data collection" is a huge superset of "cookie tracking data"; the former encompasses all credit card information database breaches (such as Sony's), along with all government and healthcare database 'leaks'.
We could limit it to "for marketing purposes" (which is what I meant, though I failed to specify it) and still find plenty of clear-cut examples of harm. This isn't breaking news. I took a class in graduate school that was largely devoted to studying examples of them and discussing their ethical and policy implications, and that was years and years ago.