In the same way you cannot just sign a contract that is against the law, a company shouldn't be allowed to do whatever they want with your data, just because they made you click on an "Accept" button.