If it pushes all companies to be clear about their potential GDPR issues, I'm all for it. Let them compete on ease of compliance. As it is, it's very difficul

If it pushes all companies to be clear about their potential GDPR issues, I'm all for it. Let them compete on ease of compliance. As it is, it's very difficult to tell if something you're using is gathering data that you don't intend to gather (e.g. your hosting provider logging IP addresses for your hand-coded blogging software). I don't want to have even the tiniest possibility of being on the receiving end of one of those theoretically huge GDPR fines just by self-publishing some code and putting it on the internet.