@wtrmt @josephcox @brucelawson Most privacy laws require to place an official complaint for enforcement at the individual level.

Anyone who had their data collected by a third-party like this without prior notification and consent, and has a local privacy law protecting against this, can likely place a complaint. It's often very easy to do.

Here's a short guide I wrote to help with this: https://www.privacyguides.org/en/activism/toolbox/tip-report-privacy-violations/