This is why data protection laws are needed. Data about a person needs to belong to the person. This would prevent these large collections without consent.