Comment by nicce

I am curious thought that how it would be illegal according to GDPR. They are hashed after all, and the same hash is not used for authentication.