Only of they are connected to a short list of more sensitive PII, of which "tor user" is not one. IP logs are fully legal in the UE under GDPR and Tor deanonym

Only of they are connected to a short list of more sensitive PII, of which "tor user" is not one. IP logs are fully legal in the UE under GDPR and Tor deanonymization is just an IP log of connected users. Also there is already plenty of research of this type out of the EU. It's quite common in infosec.