For my non-European readers, here is an excerpt of what the GDPR means: (emphasis mine) The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). A processor of personal data must clearly disclose any data collection, declare the lawful basis and purpose for data pr