GDPR would definitely prohibit transferring the ID data to third parties outside the EU. They could replace this mechanism with European ID verification services (via eID or video verification). But I can't imagine many people would go through that hassle, just to keep using Twitter/X. Then again, this Elon man is a literal fountain of terrible ideas, so who knows at this point.