I understand the benefits of this feature for audits, but how does one deal with GDPR requirements? Is there some way to alter historic data to remove PII, or should the affected columns be excluded?
You can't alter historic data, but you can include or exclude just selected columns from versioning. You can also purge all history by date range, but not apparently just the history for a given record.