> Some requests totally are identify-able though, for example if the user goes on to click one of our ads, buy something, and give us their postal address. In t

> Some requests totally are identify-able though, for example if the user goes on to click one of our ads, buy something, and give us their postal address. In the eyes of the law, we have broken the rules there by re-identifying previously anonymous data. You are either compliant or not. Claiming that you are 90% GDPR compliant still makes you non-compliant. > While I think Google is technically in the right here, No, they are not technically right, because even being 99% right makes you 1% wrong, which in case of Google would affect 70M people. > they're gonna loose big time because they're a foreign company and don't have much love with the public. The love of the public doesn't have any legal influence, and being a foreign company doesn't mean that company can play by it's own or their home country rules. By the same logic, one could argue that Volkswagen, Deutsche Bank and Monsanto got fined hefty only because they are foreign companies, and that they would be either not fined, or fined much less if they were US based. Oh, wait ...