I wonder how that applies legally if they happen to collect data on you and you haven’t given consent.