Aren't there laws in place about selling/sharing individualized personal information?

If not, then I think there should be so apps that simply want to use aggregated data will be allowed and will be guaranteed to be safe.