I wrote a largely autonomous agent that seeks and builds data dossiers on everyone you point it at. Then you buy legally encumbered data, genuinely sensitive stuff for fractions of pennies, and you reverse identify the person, unencumbering the majority of the data, because writing privacy laws that don't cripple well intended business is very difficult.

It is not inherently bad. Some of the real life uses are practical and beneficial, but it can also be weaponized.