I am Jack's complete lack of surprise. In all seriousness, without strong data privacy regulations (ie: GDPR), we will continue to see this sort of stuff, as t

I am Jack's complete lack of surprise. In all seriousness, without strong data privacy regulations (ie: GDPR), we will continue to see this sort of stuff, as the potential monetary rewards for using this sort of data far outweigh the potential liability. Cost of doing business type stuff, rather than an existential risk for abusing public trust. My opinion is that data should be treated like a fissile element - very dangerous to hold and store, but extremely powerful when properly employed. However, it's only dangerous if the liability of storing it is significant and real, as of today, it's not (in the US).