Ask HN: Is it legal to sell email list?

I am wondering, how do sites like builtwith, adapt.io,prospect.io sell email lists of a company? Doesn't it break GDPR rules?