You are assuming that there is no room to game that. There is and the problem is now you have given those who want to cheat the system a better base to do it on now that the customers have actually given their consent.

So in theory yes, in reality I am doubtful.

But we do have laws and we can improve those laws without adding more bureaucracy to companies which is what GDRP do.