This type of case could get interesting with the new EU data privacy laws, GDPR, coming into effect in a year (May 2018). You have to be able to prove consent.

This type of case could get interesting with the new EU data privacy laws, GDPR, coming into effect in a year (May 2018). You have to be able to prove consent. "Controllers should also implement mechanisms to ensure that personal data is only processed when necessary for each specific purpose." It will be interesting to see which type of cumbersome consent forms we are going to have to go through when this comes into effect. https://en.m.wikipedia.org/wiki/General_Data_Protection_Regulation https://en.m.wikipedia.org/wiki/General_Data_Protection_Regu...