The regulation [1] look like it applies also to US services collecting
data of EU citizens. GNU people mentioned [1] as good source for "what
has to be done" to comply to the regulation.
IANAL, what does this mean for
fedoraproject.org, and friends? Do we have
to do something?
[1]
https://www.eugdpr.org/
[2]
https://termsfeed.com/blog/gdpr-privacy-policy/
Pavel