> Come to think of it, I wonder if this Apple thing would even fly under GDPR?

Possibly? I’m not a lawyer, but if this is about compliance with a legal obligation, and they’re under that category of pressure? I think GDPR would allow that?

Certainly seems more likely allowed than the stuff Facebook complained Apple was preventing them from doing.