Yeah, just look at Discord. Not only harvesting data, by sharing it with "trusted partners" I was told the Esafety commissioner can bring legal action to find companies up to $850k per offence for improperly storing Australian citizens data, but I haven't heard anything about hundreds of millions in fines against Discord yet.