I’d not be surprised if they just had some other way to obtain the data, that’s more reliable anyway. By legislating against it, maybe they dodge some contractual obligations idk, there’s a million possibilities. That’s a paranoid perspective.
In reality, I assume if I’m on the internet, or out in public, something somewhere is probably collecting data on me. Maybe that data is being linked somewhere, maybe it isn’t. I believe privacy will be history soon. I think this will ultimately be a good thing.