We already have laws that abridge the freedom of speech, so it's not absolute.

What's special about slander that we can have a say "you're not allowed to make defamatory false statements about people," but we couldn't have "you're not allowed to spy on people and sell information about them"?

Granted slander is a civil and not criminal matter, but if I could sue companies for sharing personal information about me that would still be something.

There's nothing in the Constitution as it stands today that prevents us from having strict data privacy laws. No amendment is needed.