All public Trello power-ups have to be GDPR compliant, for example. The requirements are laid out on their developer documentation page [1]. You have to poll an

All public Trello power-ups have to be GDPR compliant, for example. The requirements are laid out on their developer documentation page [1]. You have to poll an endpoint every 14 days to remain compliant, delete data on request, etc. If you're building a power-up for free/fun, it might make you think twice (just because of the payoff/effort ratio). But I'm going to charge money for my power-up, so something like this isn't really a big deal. If you have time/money or plan to make money, GDPR compliance isn't terribly difficult. But free/cash-strapped service providers would probably think twice before becoming compliant (which is why a lot of local US news websites just don't allow European visitors -- compliance is somewhat expensive, and local news in the US isn't doing too great right now). [1] https://developers.trello.com/docs/personal-data-storage https://developers.trello.com/docs/personal-data-storage