[rlpb]

> It's too vague, and really hard to manage.

It's really not. Don't collect or process personally identifying information, and you're in immediate compliance.