No, because no one really 'knows' it's being collected/not yet deployed at scale.

Until some DB leak happens.

No, because ignoring the GDPR under all kinds of technicalities is standard practice: https://noyb.eu/en/microsofts-xandr-grants-gdpr-rights-rate-...

There are two types of ignoring that's been very common with the american and swedish companies I've battled with.

1. Protection against law suits. We reserve the right to not delete any information you have, since if there's a law suit we would need that as proof.

2. Freedom of speech. We are a publisher, so by removing your personal information, our right to free speech is threatened and since this is a foundational legal principle, it overrides any GDPR laws.

Could you expound on the first point in greater detail

I can give one perspective...

I worked in the communications part of a lender. We couldn't delete anyone's texts or other correspondence for a number of years due to compliance requirements.

Adding to this, I tried to do the same thing and after providing uuid2 they said "we don't know where it is, but if it exists we will delete it" or something like that, which of course is ridiculous because you can f-ing access the database and access the unique identifier. I'm gonna do it again in some time and try to file another gdpr complaint as soon as they tell "me nooo we can't do that silly ahah"