My wife works for a competitor of the company mentioned. They are in EU. Still run everything on AWS. The data collected is usually even more than what stated, full video recording of the session with audio etc.

AWS EU region is not doing much, and I suspect most companies run on US providers. EU needs independent platform for this to matter.

Why? I don't want companies and governments to datamine and abuse my data at all. Be it in the US or EU, it's going to be no-way either-way.

It would be even better if the law enforced that this kind of data could only be used for the stated business need (the basic identity verification), and not be stored or used/shared with anyone else. If anyone is caught violating a law like this, throw the entire c-suite in prison for 10 years.

I’m so tired of all these covert ops run by these businesses. They aren’t going to stop until there is a heavy price to pay.