A. This is a source that is part of the problem industry (and therefore expected to paint a rosy picture).

B. This source also states that the GDPR prevents data harvesting without consent, which it mentions continuously throughout this article.