> If proper GDPR compliance can’t be guaranteed by launch, I’ll restrict access from EU/UK regions until it’s fully ready.
This is not enough. A US IP adding an EU/UK resident is also against GDPR if the added person's PII is involved. I am unsure how you can conclusively check if an added person is a UK/EU resident without committing an even worse GDPR violation, but just IP geoblocking EU/UK regions is not a solution here.
This is not enough. A US IP adding an EU/UK resident is also against GDPR if the added person's PII is involved. I am unsure how you can conclusively check if an added person is a UK/EU resident without committing an even worse GDPR violation, but just IP geoblocking EU/UK regions is not a solution here.