In theory, no. A good data enrichment solution should only aggregate information from public databases or have the rights to the data. The General Data Protection Regulation (GDPR), for instance, is very clear about allowing data enrichment, especially in the context of fraud prevention.