I think the challenge for blockchains in complying with GDPR will be it's clause about the "Right to be forgotten". I don't see how it will be possible in a blockchain such as Steemit where everything is immortalized after the data is entered in. I am curious why we did not get the same updated privacy terms on our emails from Steemit. Could it be because we consented on it beforehand?