The law is not strict enough. No single byte should be sent outside without user's consent. No matter whether it contains personal data or not. And that would

The law is not strict enough. No single byte should be sent outside without user's consent. No matter whether it contains personal data or not. And that would make proving company's guilt much easier.