It’s already illegal- this is the exact kind of nonsense Google and Facebook were fined for at the end of last year. Strangely the Irish data protection agency seems less enthusiastic.