Re: without their knowledge or consent
From the article, they started testing it over a year ago, so <-1 years.
Did you mean "How long until this becomes a GDPR issue that someone with the power is actually looking at"? That might be a higher number as Ireland is in control and doesn't run fast on these things. It could be worth checking if you're in the "small number of users" and filing complaints.