It’s possible that large portions of the GDPR do not apply to Fluther due to the decisions made by the EU’s Court of Justice in Wouters v Nederlandse Orde van Advocaten (2002) and FENIN v Commission (2006). Both drastically reduced the scope of what counts as “economic activity” under the law, and neither is affected by the recent changes to Article 3. That said, the GDPR can only require the site to delete the categories of data that it explicitly protects. Even if we had to completely remove someone’s account (which is trivial for Ben), it would not require us to remove any of that person’s questions or answers (since the terms of service require jellies to grant Fluther non-exclusive publication rights). So in short: the categories of data protected by the GDPR are not involved in any of the public-facing elements of Fluther, and removing protected data from the back end is pretty straightforward (though it requires a site administrator, not just any moderator, to do it).