Boosted:

Real question: what implications does GDPR have for decentralized protocols like ActivityPub where instances in countries like the US are likely to cache data from users in European countries even if those users are not members of that instance and did not consent to data being stored there? Is there an expectation that covers this?