2 ms·

Because they don't understand how GDPR applies to them, or they don't want to respect their users' privacy.