> In fact, the GDPR has also made it harder to slap a comment box on your website in general. The moment you do, you are now considered a data controller. And v

> In fact, the GDPR has also made it harder to slap a comment box on your website in general. The moment you do, you are now considered a data controller. And visitors can demand that you provide them with insights in how you manage their comments. Not if you don't store any personal data ("any information relating to an identified or identifiable natural person" as per the GDPR). If you just provide pseudonym and message fields, you have no issue. This is in the spirit of "data minimisation". The other alternative is of course to remove the comment box and provide some contact info. Works well but people might not be as keen on sending something.