How can you even report to your investors on this diversity? I was under the impression that registering things like sexual/gender/religious identity and "race"

How can you even report to your investors on this diversity? I was under the impression that registering things like sexual/gender/religious identity and "race" are not allowed under GDPR unless you have very good reasons (i would assume securing investment is not one of them).