> They've been knowingly and willingly violating the GDPR

That's quite the inflamatory statement to throw out there without at least providing a source or two.

I'm guessing they are talking about this issue which has been open for a disturbingly long time: https://github.com/rust-lang/crates.io/issues/955

IPs and the account data you give them. And the complaint is not the collection, just that there's no listing that lets you know they collect IPs.

Seems extremely minor. I'm very far from disturbed.

Minor sure, but it's still illegal.

It seems to be grinding through to a conclusion. Google analytics has already been removed (2018).

Activity only started after the ICO made contact with them as a result of my complaint.

(I also have issues with how slow the ICO are at investigating, but that's a different story)

This is not accurate. I can agree that the process has been slow and frustrating, but that’s for us as well. We would have much preferred to have this all sorted a long time ago.

I won’t be able to say more than that, but I can’t stand by suggesting that we don’t care about this issue. I’ve been personally advocating for these things longer than that issue has been open.

If you've been personally advocating against the inertia of your team for a long time, I think that lends weight to the idea that "we" (the team) don't care about the issue so much. You do, but not the team you're part of.

That could be the case but the inertia doesn’t come from the team.