Abusing that is technically illegal, although due to how favoured rights owners are (even presumptive ones), I've never heard of anyone getting even a slap on t

Abusing that is technically illegal, although due to how favoured rights owners are (even presumptive ones), I've never heard of anyone getting even a slap on the wrist for it. GDPR, though, is made to be used for this. It's companies' responsibility to set up processes so they can give you this information easily; if they haven't, you're doing a public service by encouraging it. And it's perfectly reasonsble to ask for an audit of how they treat your personal info, when they just very publicly cozied up to an oppressive police state.