@spherulitic IANAL, but I would expect that GDPR only applies to data that you actually collect, not to what your software reads but does not send home

definitely a waste of time (feels like an error in drafting by the legislature tbh?), but like. a trivial waste of time

@recursive if I was mad about this, what good would QRTing it do

but also this is just a fact that is true; same as how you can tell how high-quality crude oil is by tasting it

@wwahammy @dalias @whitequark the most obvious candidate is Valve? and I'd expect it'd be very possible to come up with cases for Canonical and perhaps Framework

the preponderance of the evidence standard simply means "more likely than not", and any competent AG is going to be able to convince a judge or jury that at least a few thousand kids have probably used Steam Decks in California

@dalias @whitequark you may well get the fine if the court rules against you and you'd been out of compliance the entire time without a preliminary injunction in place (and who knows if a court would grant one for this)

this is not risk any business should be expected to take