[krageon]

It's not allowed under the GDPR. But let us get real; this is Google doing it, and anyone complaining about this practice would first need to prove that it happens (which is not easy). You can (and should) expect large American companies to always ignore as many laws as they can get away with.

[skybrian]

That's a caricature. In my experience, Google has lots of lawyers that are quite serious about making sure what they do is at least arguably legal, and company procedures to make sure that employees follow the rules. Not that it always works.

[_8j50]

Arguably legal thanks to FISA court orders that benefit Google and usgov? Where blame can be placed on "coercion" by US intel community?