Is asking about vulnerability too intrusive?

In this episode, we discuss data and intrusion. Where can we obtain vulnerability data? Are we allowed to ask the consumer, and if so, are we allowed to ask intrusive questions? What has been the experience thus far, do consumers engage, and how do they feel about privacy and GDPR?