Quote:
Originally Posted by In Omnibus
Haven't tested it because prima facie it fails the litmus test of allowing a "data subject" to request their data be forgotten without first agreeing to terms with which they may not agree. If they have to agree to terms or policies to even access the contact link it violates the spirit of the GDPR, if not the letter of the GDPR.
|
Quote:
Originally Posted by In Omnibus
The correct answer is:
If you sell, market, or conduct research in the EU / EEU then you must have GDPR compliance.
Otherwise, it's not required.
|
In view of these comments I deem I don't technically need this. For user peace of mind I'd still like to offer this but as the current state of the mod is insufficient for the quoted reason I'll hold off for now and keep an eye out for an update that fixes said situation.