> ven if the worst case is true, in legal terms, and you decide that you're forced to redesign the system to make the right to be forgotten (and while I'm not a

> ven if the worst case is true, in legal terms, and you decide that you're forced to redesign the system to make the right to be forgotten (and while I'm not a lawyer I really doubt that that is a sane explanation of the GDPR), then it's just some refactoring work. It's not fundamental to the design or business model of your app (you're a messaging app, not a "sell user data app") Exactly. Unless the business model is built around collecting and reselling user data, then (without anymore context) it sounds like this should be a (slight) refactor, not an entire redesign.