@Bianca

By my reading, this proposal is completely incompatible with the latest draft of the ePrivacy Regulation. (For the non-policy types, that means “potentially completely illegal”.)

There are certainly valid concerns about whether this would violate certain longstanding U.S. laws on computer misuse as well.

A privacy impact assessment documentation process would have identified these issues,l privately, but introducing a PIA process into project development was literally laughed down last year when the core-privacy team tried to raise it.