On the GDPR-front
This piece https://2040infolawblog.com/2019/11/10/hare-brained/ might be of some relevance regarding your comment that GDPR doesn't deal with collection of date.
TL;DR - GDPR does deal with collection.
This piece https://2040infolawblog.com/2019/11/10/hare-brained/ might be of some relevance regarding your comment that GDPR doesn't deal with collection of date.
TL;DR - GDPR does deal with collection.