Comment by blue_cookeh

An operation as large as Wordpress.com or .org should be GDPR compliant. I don't see any cry for sympathy here but more that OP is holding someone to a baseline standard expected of entities operating in Europe.