Your previous comments notwithstanding, this comment does have a legitimate point. If you truly do intend to take good care of your users’ data, then the goal s

Your previous comments notwithstanding, this comment does have a legitimate point. If you truly do intend to take good care of your users’ data, then the goal should be to have you demonstrate that whilst making it as easy as possible for you to do so (without compromising the said care). I’m hoping that over the coming weeks and months the enforcement of GDPR and various court cases will add clarity and allow the development of improved guidelines for becoming compliant. If a random SaaS company that users emails for logins and communication with active customers could look at a simple 5 point check list which they could check though in a day then things would be better for everyone. Less burden for customers, wider services for users, and those firms that can see they could make a few small changes to become compliant would be more incentivised to do so.