I guess moral only exists for things which were a problem for a long time. Mass data collection is a relatively new thing. So morals around data collection don't really exist; ask the average person on the street how much they care about this. Result is those non-existent morals weren't able to be codified in law hence no wonder somebody is out there 'exploiting' this.