I think Americans should un-learn what data is. Here in the European Union we have certain data laws that protect the data that we have created. No company can place itself above the law. Upon GDPR I have the right to protect any personal identifiable data by requesting erasure or request full download. None of that is present on WordPress.org, you have a form that is not working most of the times. You don't even list a legally compliant entity there responsible for handling that, nor a proper Privacy Policy or GDPR disclosure. In terms of the law WP.org is not legally compliant in the European Union.

Everyone should be able to request to see what data is managed there, to download it or to erase it [erase doesn't mean archive]. Anyone should be able to delete his account as well [not disable/deactivate it]. On the other side - everyone who sees his personal identifiable information there exposed - email address, postal address, IP, name, other personal identifiable data, should be able to request deletion of it.

None of that is present on the current WP.org. You have a weird legal entity connection where Automattic people are responsible for WP.org moderation, but the Automattic.com support team says they won't handle anything related to .org. Then you have a WordCamp email to address GDPR and privacy issues.

In accordance with the European laws you have to have a clear legal entity listed there with all details - legal name, legal entity postal address, email etc. This entity should be responsible for handling the legal requests from people that are protected under the GDPR law. None of that is there, not even a GDPR privacy policy form.

These things were all setup in a way that purposely confuse and diluted responsibility. A global product should upheld the laws of the countries where it is distributed, not just the US law. Here in EU we place the law above corporations, companies and foundations. No privacy policy ot terms of use could breach the law.

The WP.org site doesn't even have a cookie consent which is mandatory from many years in the European Union, the UK [their own laws] and other countries.

Americans should wake up, we don't all live in their country, we have laws and regulations here and if they want to distribute their software and services in other countries and unions, they should follow the laws of these places where they conduct business.

It seems like the team behind WP.org is completely filled with only US lawyers who have no idea of the EU laws or the international law and principles.

Don't worry, the European Commission would come after them as well.