Comment by JohnFen

> This is why I consider the GDPR to be unrealistically broad in its definition of PII

And I consider it far too narrow.

> If I'm given a forced choice between "more privacy" and "better software quality" I'm going to lean towards "better software quality."

Fair enough. I would go for "more privacy", personally. There is no technical reason why both of our preferences couldn't be honored.