> To be fair, it's already been torpedoed due to GDPR
Not really. I'm a deep learning researcher and my work has to be palatable to the GDPR. You can remove personally identifying information from training datasets with some effort (replacing faces with GAN-generated fake ones, ditto with license plates and telephone numbers, etc.) It's just another aspect of data cleaning and not that big a deal.