The ICO, UK's data protection regulator, failed its regulation: PECR (ePrivacy) and DPA (GDPR).
The failure as controller of Global Privacy Assembly's site, meant that without consent, Twitter effectively received a list of people interested in GPA.
Sites with Twitter feeds typically need informed cookie consent before being loaded. Don't take my word for it, you should get the same response if you now ask the ICO or read Twitter's terms.