1.) FOI only applies to public bodies. You can't send an FOI request to O2.

2.) People probably opted in to this without realising. Do they need to supply an opt out, if it was a condition of signing up in the first place?