Two questions come to mind: 1. Isn't this person allowed to be the Data Protection Officer themselves? 2. Is APNS inherently not compliant or if there somethin

Two questions come to mind: 1. Isn't this person allowed to be the Data Protection Officer themselves? 2. Is APNS inherently not compliant or if there something unique about this use-case? What's kind of great about this new regulation is that we get a clear view on businesses that can't adequately protect user's privacy. It's painful for businesses such as these, but ultimately it seems that consumers would come ahead of it. If the weak link in this case may not have been the developer themselves, but external factors but it's still a pretty interesting data point.