I'm not here to defend the corporations.
Email addresses are PII under GDPR, aren't they? So linking email addresses to purchase history is explicitly retaining PII and data about someone they can identify.
I'm not here to defend the corporations.
Email addresses are PII under GDPR, aren't they? So linking email addresses to purchase history is explicitly retaining PII and data about someone they can identify.