GDPR is absolutely insane. I was working on a European website where a user would upload a product info along with a photo of the product. I had to abandon it, because I'd have to somehow filter all uploaded content for copyright and other violations, as I'd be liable under this new law.