How is this not a compliance risk? Automatically transferring data, including personal data, to the cloud without explicit consent raises GDPR concerns.