Comment by minsc_and_boo

Is that for US- or Italian-based users? What if this is an Italian company running a global website with data from non-GDPR country users?