It doesn’t. That’s violating gdpr. But you can break gdpr without consequences.