I wonder too whether @ICOnews might not be more than a bit concerned that @Barclays GDPR statement doesn't disclose this behaviour, and that the login page doesn't work if this functionality is blocked.