The EU has passed the GDPR, prohibiting companies from harvesting customer’s personal information without specific a business need.

https://www.cennydd.com/writing/a-techies-rough-guide-to-gdpr