I'm pretty sure the EU has better regulation in this regard than USA, although it didn't protect the UK from Cambridge Analytica. I hadn't thought to take a look at Canada's regs. Thanks!

Unfortunately even very fresh and new data can easily be used to manipulate elections and referenda.