It has nothing to do with regulation. Users sign contracts that explicitly state the company will do this. You can't fault the company for doing what it told you it would do.