Yesterday the General Data Protection Regulation officially came in effect, this means that as public service we had to take some countermeasures to became compliant as best as we could.

As not so little data that is dealt with on XMPP is PII and also that because of its decentralised nature basically the said data has to be treated by multiple entities and not just us. We have been forced to deploy a module that enforces some limits on server to server communication if the user doesn't give consent to the treatment of his data.

GDPR in its current form is not adapt and very biased against environments like XMPP but we will still do our best to oblige and be compliant.