It's very simple to be compliant - just don't process PII that isn't core to your business process for serving given user (marketing isn't considered core proce

It's very simple to be compliant - just don't process PII that isn't core to your business process for serving given user (marketing isn't considered core process unless it's literally the service you provide the affected user)