Under the GDPR, "the data is not available publicly without explicit, informed consent, and cannot be used to identify a subject without additional information

Under the GDPR, "the data is not available publicly without explicit, informed consent, and cannot be used to identify a subject without additional information stored separately. No personal data may be processed unless it is done under a lawful basis specified by the regulation, or unless the data controller or processor has received an unambiguous and individualized affirmation of consent from the data subject. The data subject has the right to revoke this consent at any time.... Data subjects have the right to request a portable copy of the data collected by a processor in a common format... violators of the GDPR may be fined up to €20 million ..." https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://en.wikipedia.org/wiki/General_Data_Protection_Regula... Key phrases here: 'explicit, informed consent' ... 'lawful basis' ... 'right to revoke this consent' ... 'fined'