Fortunately, with the EU GDPR coming into effect mid 2018, companies can be fined up to 4% of their global annual turnover for each breach of a specific provision; and 2% for each breach of other lessor provisions.

That should hopefully make these actions uneconomical.