> nothing is stopping a company from sending me only some of the information If their database later leaks and shows that they had more info, they're in a worl

> nothing is stopping a company from sending me only some of the information If their database later leaks and shows that they had more info, they're in a world of hurt. The DPA will already be looking for an excuse to punish them (having a breach isn't punishable in itself), so they'll nail them to the wall for this.