the first clue is that its the ICO that is running this. the ICO has nothing to do with the online safety act.
Secondly asking a commercial company to conform to basic data protection isn't that onerous.
Honestly its almost like HN has tumbler level reading comprehension.