2 ms·

I dont think ownership of a red hat would be considered personally identifiable information under the GDPR.