[throwway120385]

Sounds like it should be illegal to share data by default, and that individuals shouldn't be able to sign away their expectation of privacy as part of a EULA.

[jacquesm]

That's called the GDPR. Positive, coercion free, explicit and non-tied consent is a hard requirement. See article 7: https://gdpr-info.eu/art-7-gdpr/

[iso1631]

Unsurprisingly the average startup bro hates the GDPR, they see it as an obstacle to doing things with data they shouldn't