It probably would these days, but in 2012 there were no such regulations.

These sorts of shenanigans a decade ago certainly influenced the creation of GDPR.