I might be wrong, but I want to believe that data selling should be one of the best ways for so many companies/organizations to make money in this country. Nobody checkmates the system... No follow up. As long as these organizations pay taxes, they are free to do whatever they like.
And sadly, we live in a country where we have so many internet literate that are not really literate per say. They have zero knowledge as far as personal data and information is concerned. Just like you said, it has become a common thing to receive calls from scammers after visiting a bank. So many of these bank workers are not as professional as they look, because I don't understand how a total stranger would call me after visiting a bank.
The truth is, this discussion is very vital, but from the current happenings in Nigeria and how ugly and undeveloped things has become, people won't still take this very serious, mind you, the majority don't even have an idea of how important their info is.