Hacker News Reader

Is their job to reduce private data to the minimum needed, or the maximum allowed?

Probably to find loopholes and questionable interpretations.

Would you consider GDPR a failure if businesses collected the maximum allowed under the law?

A requirement to minimize data collection is part of it.