OP Here. The legal part is important, but you don't have to make it easy. GDPR was a good step forward if not in the way people think about the subject. It would be great to see other countries follow this.