Vlad is not discussing, he is lecturing. The author of the blog post seems right. Vlad defends his position "lol email is not PII" repeatedly, despite being obviously and completely wrong. He has no understanding that it doesn't matter that a user could enter fake information.
His business collects email addresses, which is a process. Under GDPR, this process must be documented, users must be given their data on request (even if it just contains an email address, but usually it also contains the signup date for example as a proof for their data processing consent) and users must be informed about their rights to correct or delete such data.
He comes off totally as the "trust me bro" guy with zero respect for a different perspective and doesn't seem to be interested in changing his (objectively wrong) opinion. It is almost laughable, because "is email PII" has been discussed a million times since the introduction of the GDPR that you must've lived under a rock to dismiss it like Vlad did.
His business collects email addresses, which is a process. Under GDPR, this process must be documented, users must be given their data on request (even if it just contains an email address, but usually it also contains the signup date for example as a proof for their data processing consent) and users must be informed about their rights to correct or delete such data.
He comes off totally as the "trust me bro" guy with zero respect for a different perspective and doesn't seem to be interested in changing his (objectively wrong) opinion. It is almost laughable, because "is email PII" has been discussed a million times since the introduction of the GDPR that you must've lived under a rock to dismiss it like Vlad did.