These huge companies lie to their teeth even though they have legally sworn they will not do what they shouldn't do. Big companies will always find loopholes, legally or not, to have things their way and to make more profit off of their consumers without them knowing of what these huge companies are doing. IMO, $150m is not enough of a fine for selling users data. It should be more. Remember Google's $5b fine in EU? Not entirely similar case but the nature through which they took advantage of their users is very similar.