Earlier quoted context omitted.
There is a comment on the issue tracker alleging that the CFO overrode concerns by the Director of Global Risk and Compliance.
wow, do you have a link for? pushing through legal recommendation is quite reckless. GDPR is quite a hot topic and the regulation has real teeth (aside the public backlash)
The original comment from Paul Machle is "I don’t understand. This should not be an opt in or an opt out. It is a condition of using our product. There is an acceptance of terms and the use of this data should be included in that."
I am not a lawyer, but that does contradict pretty much everything I've been taught about GDPR.