Surely this would be illegal? Personal data without consent?

Or is it a case of too big too fail.

Seems like running governments' infrastructure pays off. No regulator will dare to impose a fine that could collapse the company. But this is very much needed.

£100bn fine and confiscation of assets in the given country could be a start.