... since the GDPR came into force. It didn't take long, did it?

Plus this one potentially involves LOTS of personal information, plus lots of sensitive personal information and some big name clients to boot. That's the hat-trick. 

But as an individual, this is exactly the purpose of the GDPR. To be transparent. 

It's weirdly reassuring to know when it's happened, as opposed to just suspect it happens all the time and it's just that nobody knows about it. 

And it also hopefully makes lots of other providers sit up and review their own practices to improve the protection of data for everyone.