[kylealden]

I'm not sure where you get the idea that GDPR doesn't apply to operating systems.

You can control every facet of your diagnostics in Windows settings, see every bit of data collected about you (both locally and on the cloud), and delete it all.

[beagle3]

According to every article linked in this sub thread, (a) telemetry is opt out (not in) and (b) you cannot opt out completely, only partially; since telemetry is not actually required to provide service, that would be a GDPR violation, and if it is - I expect someone will take Microsoft to the cleaners over it. (As well as google for android’s data collection)