But if a law came in to effect that requires them to not abuse customer data in their local area as well, there suddenly would be a 'ROI' on that? Seems to me

But if a law came in to effect that requires them to not abuse customer data in their local area as well, there suddenly would be a 'ROI' on that? Seems to me they chose to simply not care about what data they collect on who from the start and it will bite them in the ass eventually.