Funny enough, in that one region where this regulation exists, no such incidents of user data being sold was discovered so far...