The GDPR is an EU regulation, but you appear to be adopting some US(?) based conventions and terminology, and then posting a string of buzzwords that have little if any connection to the subject at hand.
Also, are you seriously suggesting that in response to a formal legal communication it's a good idea to reply without having input from a lawyer?
Also, are you seriously suggesting that in response to a formal legal communication it's a good idea to reply without having input from a lawyer?