Dumb question, but wouldn't those things be in violation of the GDPR laws?