I agree that this behaviour should not be 'normalized' ever, its not acceptable. I find it hard to justify that companies should not collect any data.. It shou

I agree that this behaviour should not be 'normalized' ever, its not acceptable. I find it hard to justify that companies should not collect any data.. It should just be the minimum required. Such as GDPR attempts. It's so frustrating that there is no recourse usually. Organising class action suits just takes too long to co-ordinate in a timely fasion that would point a larger spotlight on security.