You can't withhold service based on accepting non-essential data collection without offering alternatives, that falls under coercion and is a direct violation of the regulation. Should you ever see that report them immediately (something I already did once today).