The GDPR (General Data Protection Regulation) is a a Regulation in EU law on data protection and privacy in the EU and the European Economic Area. Essentially you can't hold peoples private info on your servers, especially if that person happens to be a child or underage. Essentially it requires that if you have info such as an email, mailing address, full name, age, phone, etc on your sites database, the person can request all of that info to be removed, even their account if they so desire. I remember I site I worked for which had stored some info such as emails, name, mailing address, etc and we would get some emails citing the GDPR and requesting that we remove their info. Do you comply with this when it comes to your site and any business you run?
