The General Data Protection Regulation (GDPR) affects everyone working in the field, since it extends even beyond the EU. It's a hot topic, and all kind of myths and claims are developing around it. Naturally it produces questions on related StackExchange sites like Server Fault and Information Security, some possibly too technical to be answered on the Law StackExchange.
What is on-topic here? Where should we draw the line between technical and legal questions? I think it's obvious that questions asking how to perform an exact action to comply with the GDPR are on-topic, while questions seeking merely interpretation of the regulation are clearly off-topic.
Then there's gray area of questions related on the measurements, actions and perspectives other professionals involved in (technical) processing of personal data have taken. Any thoughts on how should we handle those? While there is a risk that we try to give too definite answers to questions no one yet actually knows about, we may also reject good questions if we are too critical.
