It is, and that is why the company took action:
> After being confronted with this research, Stichting 113 temporarily suspended all measurement and analysis tools on its website.
It does not mean that this cannot happen, but the regulatory framework helps stop it.
I guess it didn't help enough to stop them from doing it in the first place--it just helped them stop once they were caught. Sure, it's a step up from other places where there is literally no consequence for this kind of sharing.