So is EU really the only place left where this intrusion is not happening / allowed? I'm sure EU networks also have this data, but selling it commercially would

So is EU really the only place left where this intrusion is not happening / allowed? I'm sure EU networks also have this data, but selling it commercially would cause quite a scandal, and certainly is not allowed without opt-in under GDPR.