Would it be possible to prevent this by using laws set by GDPR? Or at least cause such a great hassle for them to stop it?