I have a responsibility to treat users in a way that I consider fair, which includes protecting data such that it doesn't get used in a way that I wouldn't want

I have a responsibility to treat users in a way that I consider fair, which includes protecting data such that it doesn't get used in a way that I wouldn't want my data used, or that a person who is more sensitive than me wouldn't want their data used. I do not agree that I have any sort of implicit responsibility to treat my users in a way that an EU bureaucrat deems fair.