GDPR does, but I was only pointing out that this scenario, as presented by my parent comment, is not normal:

> "hey, I need to collect data from your system, and said data will be shared with everyone else publicly in our bug tracker"