All of the data was taken without consent. The user might have clicked some 'I agree' checkbox, but they were not in a position to give consent. We could, to compare it to other similar issues involving lack of consent, call it statutory data theft.