These companies operate in multiple countries. So, at a guess, they can implement this in areas where GDPR isn't a concern.