Assuming purchase history has that clear a pattern (I'm doubtful) doesn't that mean that purchase history alone would ... what? Not be allowed? Because it could be used to determine other things?
I'm not sure what consumer protections could really do much here if the pattern is obvious and the data exists.
read up on that case. it clearly did have a pattern. that was no random guess.
i never pay with card and i don't join any member programs to avoid creating a purchase history. pattern or not, a lot can be gleaned from what i buy.