[bryanrasmussen]

I guess, for GDPR purposes, they would need to show why they can't provide the service without privacy invasion.