[caskstrength]

> the lab will need to follow the much stricter data protection policies of the EU

But will they still retain it indefinitely on a server somewhere? If yes, it will leak eventually. Or the government will lobby to get access to it to "protect the children".

[Kbelicius]

I think that they have to delete the data per your request to be GDPR compliant since no law requires keeping such date.