It should also be illegal to collect information from users without their explicit consent.

So what are they trying to achieve?