Exactly, and this law is used everyday against European companies that tries to grab too much data. The US is the epitome of the surveillance society on par with China (look at how Apple wad sending push notification, or how phone companies just share your location data with the world). Here in Europe we fight by making sure that the data cannot be collected in the first place.