Read the GDPR or national equivalents in the EU and that will show the legal argument - literally that there are a group of laws defining that this isn't allowed in those jurisdictions. Whether or not you're convinced or not is of no consequence to the laws.