It’s not even a “loophole” it’s literally irrelevant to what people generally think of as “data privacy.” Something like GDPR is an example of data privacy.