They won't. There's GDPR in the EU, and the fines are terrible! 🙂They cover the cost by selling all your personal details.
Up to €10 million or 2% of global annual turnover (whichever's higher) for less severe breaches like record-keeping failures, and up to €20 million or 4% of global annual turnover (whichever's higher) for serious infringements such as violating core data principles, consent rules, or data subject rights, with fines often reaching billions across the EU for major companies.