Comment by whilenot-dev

> A more realistic interpretation is that the law was up to date

While I wouldn't disagree with your sentiment, just keep in mind that the General Data Protection Regulation (GDPR) got implemented 2018.