[tsimionescu]

Shouldn't this incur a massive fine under the GDPR? Isn't this gross negligence in data protection?

[progre]

GDPR enforcement against non-EU companies has not been tested yet, but this might be a juicy test case if there are any lawyers out there.