The legality is irrelevant since as consumers we don't have the time or the money to sue them for it. And even if one of us somehow do have both, we probably agreed to binding arbitration with the firm they pay anyway.
What are the real prices then? What is the “privacy price”?
It might be higher now.
One would think dozens of SWAT officers would rappel down helicopters and storm the mansions of these big tech CEOs in order to bring them out in cuffs and serve zillion dollar fines on behalf of the so called rights holders. Kim Dotcom got destroyed while AI companies got a slap on the wrist.
In either case annoying still.