People like to act like the GDPR is this complicated and draconian law, but it is not. At its simplest, it says, don't collect data with out a really good reaso

People like to act like the GDPR is this complicated and draconian law, but it is not. At its simplest, it says, don't collect data with out a really good reason, and when you do collect it, handle it safely and properly, including deleting it as soon as it is no longer necessary. I would have thought the HN community would generally be in favour of that.