Obviously they'll get away with this in the US, but doesn't this break a LOT of EU privacy laws?

>Obviously they'll get away with this in the US

I'm not sure about that. Although this reporting is aimed at the everyman, the problem they describe is far more impactful for elites and corporations. This is pervasive violation of their personal, corporate and legally privileged privacy, and is a vector for systematic corporate espionage. So I suspect US Senators will soon get phone calls from donors really upset about this.