Wouldn’t the one publishing these PII on a website be in breach of the GDPR rather than Google who just crawls it?