In reply to ruth weizenbaum.

There is no notification during installation that a) a data processing agreement is required and b) where it would be available and c) that it is mandatory.

We indeed do not display such notification on installation. We do, however, display information when you want to connect your site to WordPress.com: to do so you must agree to our Terms of Service and we inform you about the data that is shared with our service when connecting with WordPress.com. What you do from there is up to you, and will depend on your site, your readership, the features you use on that site, and the GDPR recommendations you may have received from an attorney in your country. We cannot give specific legal advice about your particular site of course, because we are not your attorney.

Instead of censoring these impotant hints, better do some interviews with leading EU GDPR lawyers and publish the results.

We published the results of our GDPR work in this blog post a few months ago.

If your attorney disagrees with our approach, it's indeed best if you do not use Jetpack on your site.