Are you referring to GDPR? As far as I can tell, the data is allegedly anonymous, so not subject to GDPR. Even if it weren't, Google doesn't exactly have a good track record of respecting privacy or privacy related laws. They've been known to "accidentally" harvest wifi traffic in bulk. They drive spy cars around taking pictures or everything and everyone.

If they were anonymous Google wouldn't be able to match purchases against ad views or let users opt out. I suppose they are just exchanging something like a hash from customer data, so technically Google doesn't get personal information.

The first GDPR suits against Google will be interesting. Nobody knows yet exactly what is banned under the GDPR.

Bloody nanny state socialists and their business destroying government overreach. No wonder they'll never catch up with Silicon Valley. /s