California has its own version of the GDPR known as the CCPA that is probably more immediately relevant. https://www.oag.ca.gov/privacy/ccpa https://www.oag.ca

California has its own version of the GDPR known as the CCPA that is probably more immediately relevant. https://www.oag.ca.gov/privacy/ccpa https://www.oag.ca.gov/privacy/ccpa Also, I'd imagine there would be a huge defamation liability.