> Most websites ask for users' email used as the account name. > email address is considered a personal information. As another poster mentioned - just don't

> Most websites ask for users' email used as the account name. > email address is considered a personal information. As another poster mentioned - just don't use email. Or if you must then just make sure you only do the minimum you have to with it - e.g. Don't send it to a third party, have a way to delete it when a user wants to close their account (unless you have a good reason to keep it - e.g. to match to a financial transaction). What's the difficulty? GDPR shouldn't be a burden for a small business unless the business is in the personal data space.