I can't imagine they would get away with this in the EU. One data protection request and subsequent slander case would destroy them in an instant.

I find the whole idea objectionable at every level and about as innovative as "rate my poo".