That is if every company that is in the chain follows those strict data protection laws. It wouldn't be the first time that bad actors exploited legally protected browsing.