Re: About time too
Creating third party personal profiles from the data trawled from existing account holders is illegal under GDPR unless I've misunderstood some of the 'allowed' reasons for holding information.
On the other hand, generating a detailed profile from the slurped contact list as soon as an account is created can be completed before the newby user has finished filling in actual details.