There must be mountains of legal concerns which vary by jurisdiction. Both in terms of copyright / right of authorship as well as GDPR/data protection.

Litigation is probably inescapable. I'm sure they want to be on solid footing.