I can echo the concern about failure of notice. We don't have the system that you see in the United States where essentially your third party information holder becomes the guardian of the situation relative to protecting your rights. If this is your information, you are most likely to object to its use in a meaningful fashion if you have notice. I don't see that there's a way around that if we're serious about protecting individual rights.
On March 12th, 2015. See this statement in context.