>You can collect email addresses still, so long as you have a legitimate reason to, you seek consent, you store them securely and remove them if consent is with

>You can collect email addresses still, so long as you have a legitimate reason to, you seek consent, you store them securely and remove them if consent is withdrawn. These are things that you should be doing anyway! Even if it's an open source side project. Where in your statement do you refute the fact that it is hard to comply with GDPR? Even if you have a legitimate use case you still need to provide users a way to access all their information and delete all their information. If you already are using more than one database this is not trivial. This is my guesstimate but I am confident in saying that GDPR adds $25k worth of work to the cost of starting up a business in the EU assuming an experienced software engineer is worth $150k a year. There will simply be a huge layer of boiler plate code added to every project now that will be necessary whenever you are processing data.