Re: Medice, cura te ipsum
For someone in Europe to take action on such data collection would seem entirely consistent with GDPR. But in a US court? Pot, Kettle!
California is the only US state to take privacy even the least bit serious and California has GDPR like legislation pending.