Not doing something with the data is also a function, just like Nulls are a value, so yes you are right that collecting the data and not doing anything with it

Not doing something with the data is also a function, just like Nulls are a value, so yes you are right that collecting the data and not doing anything with it could be viewed negatively when up before data commissioners. Its interesting watching how the IT industry views GDPR and the advice given out by various law firms. You see unlike maths which is pure, language is vague and open to interpretation, the trick is convincing the decision maker ie data commissioner or judge that your interpretation is the correct one and not just an incorrect herd mentality sweeping the IT industry, which you see in the comments posted here and elsewhere.