[downandout]

That, along with many other parts of the GDPR, is both open for interpretation and may vary from country to country within the EU. See https://aristilabs.com/how-the-gdpr-apply-to-your-us-based-c...