@hazelnot @EeveeEuphoria the GDPR has always been a good first step. A step in the right direction but overall only a small step.
There always have been multiple weaknesses with the GDPR or DSGVO how it's called in my country.
From the top of my head: Ideally you only collect and process data when you need it for something / have an important reason. Not sure? Just say "ads" or "maybe ads in the future" and it's legal! This makes the need-to-know clause completely irrelevant
1/…