It's probably already being done covertly. I assume anything done on the internet or the normal banking/financial/credit system is subject to capture. Combine that with all the social media and other government agency , and you could build a reasonable compete profile on any individual participating.