I was initially sceptical, because lying is generally not illegal. CEOs are people, and people have first amendment rights. However, it seems it's narrowly classifying the act of hiding what you do with personal data as criminal fraud, and I'm on board with that idea.