You're either naive or ignorant. You're personally fine, until your transactions are posted to the internet along with the address to where you live. Period.

You're either naive or ignorant. You're personally fine, until your transactions are posted to the internet along with the address to where you live. Period. As for the regulation, things like the recent GDPR helped a little - if you are an EU citizen, you can now legally request them to provide a list of the time someone accessed your details. I recently did that with a financial provider and had a very unpleasant experience when I found out who they share the data with - basically companies and institutions I've never heard of, like credit score providers & other financial information data mining companies.