Baldur Bjarnason (@[email protected])

Crash course in GDPR compliance, because it’s been obvious that the Americans have some misconceptions: Remember, though: IANAL and this is not legal advice 1. The GDPR does allow data collection of arbitrary stuff of the internet, such as for search engine indexing, but it must be for a single, specific purpose so that owners of personal data that’s been indexed can take an informed decision. A system that’s specifically advertised as general-purpose is pretty much automatically disqualified.