Informing consumers is largely what the GDPR regulations are about - ensuring that data can't be collected without the informed consent of users, and that when it is collected, the users can then see what data is available and how it's being used, along with being able to delete it if they wish.
