They already do. Example: https://www.tribpub.com/gdpr/baltimoresun.com/