But nevertheless: as far as I have understood it everything is built on your computer and is still used on your computer. You - as the user of the Mac - has took and saved the information. Your Mac is then only working for you - if Apple doesn't load the information in their enviroment.

If we are overriding federal laws, might as well make people immortal too.

I'm saying that because I wish the GDPR also covered the software providers who perform Data Processing against the will of all parties, but it isn't the case. Lastly, they're a person and not a business.

It is however clear that building a database of people which may contain race, religion or political opinions is illegal, even if it's just a person doing it.

If you send a friend an email, they may add you to their address book and set a reminder for your birthday while they're at it. They don't need your permission to do that, so why would a device acting on their behalf?

On the other hand, if a customer of mine asks for the data I have on them, do I have to send them my Personal Knowledge Graph facts about them?

For example, purpose limitation allows for compatible processing, and parsing calendar events to allow for queries like “when does mom’s flight land” is absolutely covered under that.

And, of course, GDPR doesn’t require consent. Performance of a contract is a perfectly valid legal basis other than explicit consent, and the operating system terms of service you agree to when upgrading or setting up a new device will cover this.

On a side note, you don’t want GDPR to work the way you think it works unless you really want cookie consent banners dialed up to a million.

None of this should be construed to mean that I like this feature in macOS or am defending it. I’m merely pointing out that this interpretation of GDPR does not match reality.