Always, but the extent is dependent on the "spied-on person". If you make information extraction easy through oversharing on social media for example.

There are some friends of mine of which I'm not even sure if they are real people at all because their net identity is very well concealed.