Again, it's against the law to abuse the legitimate interest provision, but enforcement is rare.

An exception: Disqus got in legal trouble in Norway for this. https://news.ycombinator.com/item?id=27060609