As of last I checked, people are trying it out and seeing if they can get away with it under the way GDPR is enforced. Hopefully that gets hammered out in court.