True, it's difficult not to leak personal details in ways that most users do not expect and/or want, which makes it easy to game by providing deceptive solution

True, it's difficult not to leak personal details in ways that most users do not expect and/or want, which makes it easy to game by providing deceptive solutions. GDPR is a attack on memory, starting with conditioning to accept regulation on what experiences can be legally remembered* (like who visited your property and their attributes). It starts on a subclass to make it acceptable. Once that is 'OK' the power centers can expand memory restrictions and go back to adding rules on what can be said (transmitted or acknowledged). *I'm deliberately trying to mix 'remembered' (like wetware does) with 'saved', or 'written' (like wetware creations do).