That said, they do need to be monitored at all time; abusing that location data for different usage is only one piece of legislation away. Which is why it's probably best to not gather this information in the first place.
To invoke Godwin's Law, iirc you are no longer required to fill in your religion anywhere, because the nazi's used records like that to track down Jewish people and others they were after.
This is why these privacy laws are so important, and why the right to be forgotten should be sacred; you should be able to disappear if the governments turn against you.
The right to be forgotten is the wrong place to push for privacy, it should be the "right to never be known".
As to the "EU directives are all above board and documented" you know what they say about the road to hell, and good intentions right?
Oh, you mean you want to be able to have your devices send requests to other people's devices and have them respond, but at the same time, you want there to be no record that your device ever did this? Good luck with that.
An GDPR relevancy outside the EU is just a paper promise.
I hate this coming Orwellian future.