That only requires writing an apology for a bug after processing the data in this ways was found to be undisclosed, and then disclosing it with no opt-out.

Or alternatively, process the data anyway, make tens of billions of dollars from it, and pay a 2 billion dollar fine if the regulators find out.

The fine is just another cost of doing business ;)