You're right, and cache policy issues can be really hard to debug. As a rule I don't cache personal information for this reason. Out of curiosity do you have

You're right, and cache policy issues can be really hard to debug. As a rule I don't cache personal information for this reason. Out of curiosity do you have any knowledge on GDPR's stance on caching PI?