I was under the impression that not only has this been the law for decades, it used to be the only legal way of installing spyware and also exfiltrating data. But I can’t be assed to look it up.