On Post-GDPR world I find this very surprising. And then again, not.