There's a whole other blog post waiting to be written about the intersection between GDPR/CCPA threats and spam.
Reply on news.ycombinator.com