At this point, class action lawsuits over privacy violations have been one of the primary mechanisms for consumers to essentially punish companies that have done privacy wrong (E.g. the Facebook Beacon disaster).
FORBES: Will a 'Privacy Bill of Rights' Include the Right to Class Action Lawsuits?