Comment by throwaway67743

Twitter did the same and got penalised, it's just the way people behave now under the guise of "security" - I'd raise this with whoever the competent (ha!) DPA is wherever you are and see what they say