Except that a commonly used user name is already "personal information". And your eMail address you've used to register to the forum. And the IP address that yo

Except that a commonly used user name is already "personal information". And your eMail address you've used to register to the forum. And the IP address that you use to access the forum. AND EVEN THE RANDOM UUID THAT YOU ASIGN TO USERS ON YOUR FORUM BECAUSE YOU'VE GIVEN UP AND ONLY IDENTIFY USERS BY THAT AND THEIR PASSWORD. In effect everything where a user has to input something instead of being just a recipient, or where the user is connected to any persistent identifier contains PI according to GDPR. Say bye bye to most kinds of technical server logs used to debug stuff, to your database, and storing stuff in general. The only way to be truly GDPR compliant if you followed the law to the letter would be to just provide TV and Teletext service via radio waves.