Do we have clarity about what “the data” includes? I see two extreme possibilities:
- only the personal data (e.g. the name, IP address, etc
- all of the above plus all data somehow linked to these (e.g. how much time that person has spent reading each and every post on the forum).
I doubt that either of these extremes is the correct interpretation of “the data”, and I hope the “truth” doesn’t lie too close to #2.
BTW: To keep these discussions as focused as possible, I’d like to suggest that someone moves this latest topic digression about providing data into a new topic (and tags it gdpr).