Likewise, using your phone number you provided for security to target you for ads is totally illegal under GDPR.
Before brexiting(?) UK’s ICO issues major ruling under UK DPA for Cambridge Analytica case thru final and interim reports, parliamentary evidence, etc. ICO issues 1st GDPR notice to SCL Elections (Cambridge Analytica) vendor AIQ on jurisdiction.
A Right of Access is the first, most basic right to claim. The right to know. Other data rights extend from there.
Framer slaveowners breaking off of England wrote America’s privacy policy in 1775.