GDPR like legislation would have required any company holding a profile on you to disclose that fact, would have allowed you to read it; would have been required to correct it on request and would have allowed you to ask for removal of your data. Scoring companies such as these will lobby like there is no tomorrow against such legislation.
Not all. I work for a company that deals with all kind of data like this (but not actual communications). We are building a system to honor all opt-outs and deletions and will be online before the first of the year for CCPA. The reality is that most people will not ask for this stuff because they don't care. Requests for actual data are tricky because you have to fully validate that the person is who they say they are.
