Yes. Think of zoominfo’s new ipo. They are big and can work around the regulations (ex: CAN SPAM) of selling user information. Also according to CCPA, if you process 50,000 user records in a year (just 150 accounts per day) you will come under the purview. But big companies like facebook (https://www.cpomagazine.com/data-protection/facebook-refuses...) will work around them.