In the future, this will have gone one of two ways:
Either every company knows everything about everyone (as things have been heading)
Or, GDPR etc. promote a new awareness, and future generations will look back in horror that companies publically did this sort of thing without employees being thrown in jail. This whole sort of thing will be illegal and morally and socially unacceptable, just like some "old time" activities are to us today. [ Of course, even in this utopia, the governments will still gather everything, for the sake of the children/counter terrorism etc. ]