Seems like it would be interesting to report them for a violation of GDPR. They’re a good example of a company that should be zealously compliant.
Start here? ;-)
>> mentioning some personal contacts I have to some federal law enforcement officer who works privacy cases
https://en.wikipedia.org/wiki/National_data_protection_autho...