This paper says it is lawful.

https://www.iabeurope.eu/wp-content/uploads/2017/11/20171128...