I see.
If your data protection officer decides that additional records are needed, and has some tables in mind, I would be happy to provide a more specific sql query to help you out. For the reasons I mentioned, I don’t want to nominate specific additional tables to be provided as a general piece of advice outside of the context of a case.
But if you need something specific as this case progresses, I’d be happy to help you out pro bono, as that is in the spirit of this plugin, i.e. to make it easier for Discourse communities to navigate the GDPR. If that happens, and you have specific tables in mind, and you’re in need of assistance with the SQL query, PM me here on meta.
In short, I’m happy to provide some ad-hoc technical (non-legal) assistance to Discourse communities in response to specific cases under the GDPR, but I’m conscious of not setting general standards beyond the scope of what is reasonable for the majority of cases. If there is a legal argument of that sort that the scope of the plugin should be expanded, I’m open to it.