[unionpivo]

> And in Europe they always are, in theory, thanks to privacy regulations.

Unless it was malicious (and you/government can prove it), it's companies fault.