We are beyond fighting this with technical solutions. This can only be properly fixed via regulations and laws. Unless it can be proven that certain information

We are beyond fighting this with technical solutions. This can only be properly fixed via regulations and laws. Unless it can be proven that certain information is required for the product to function, it should not be collected. If it is required, it should only be stored for as long as technically necessary. I am not familiar with the details of GDPR. Does it help in this particular case?