Nothing has changed. In both cases, you should be able to continue using that customer data to provide a service they've asked you to provide (not what is being proposed here). You should not, in either case, be allowed to sell that data to marketers who will turn around and use it to either build profiles on people, or to spam/harass them with unwanted advertising(what IS being proposed here).

There is no gray area here.