But even a basic access most likely violates the GDPR and other regulations.