Italy, France, Greece, Austria and the United Kingdom aim to stop the startup’s activities. The general regulation for data protection (GDPR) is clear: informed consent is needed when dealing with personal information, both with the photos that the startup collects from the web, and with those it requests to do research in its archives. Instead the users are not even aware that they are in the database.