Wondering how scanning and submitting of private data is possible within the EU according to GPDR rules. I doubt that the EU commission will have a blind eye on that topic.