Agencies and companies that could (e.g telcos), have been collecting your metadata for over a decade now.
The sneaky ones have been onselling your data to the black market (e.g insurance brokers).
Yes there are privacy laws, etc, etc, but my experience of big business is that there are many morally deficient individuals working for them.
CASA has been a bit slow in wanting a piece of the action, and the only thing that would probably come of it is your favourite coffee being available at the places you frequent.