Well if your product wasn't already basically spyware, it wouldn't be so much work to abide by privacy regulation frameworks, now would it? I have no sympathy for how hard it is for surveillance companies to adapt their exploitative business model to the EU.