So, to clarify the current status for compliance regarding the issues I raised in the first post:
Consent to Updated Privacy Policy / Terms of Service 
We can use @angus’s amazing custom wizard to construct a consent to new privacy policy and ToS (which can state that emails are used to “notify you about posts and other activity on the forum”):
https://meta.discourse.org/t/custom-wizard-plugin/73345/111
IP Addresses 
Sounds like a ton of work was done with regards to IP addresses and will be part of an upcoming 2.0 or 2.1 build so we’re almost there:
Data Portability
We can use @angus’s Legal Tools Plugin to allow users to download all collected data about themselves.
And perhaps some of this work can go into the normal Download button handler after the IP addresses issue is fully resolved.
Great job everyone! 