Not using the new account dashboard yet, but this already sounds problematic for EU customers if it is enabled by default. This would need to be opt-in, not the other way around, otherwise it is a GDPR violation.
I hope this gets addressed before the new account dashboard gets pushed to everyone.