Such a cavalier attitude to the storage of EC citizens' personal data is illegal under Article 32 of the GDPR: https://www.gdpr.org/regulation/article-32.html

Such a cavalier attitude to the storage of EC citizens' personal data is illegal under Article 32 of the GDPR: https://www.gdpr.org/regulation/article-32.html https://www.gdpr.org/regulation/article-32.html Citizens of the US really need similar protections.