I'm confused about WordPress comments. A user has to input their email address and name, but doesn't GDPR require people to let them know how that data will be used? Honestly I couldn't even tell you how it's used! I don't even know why WP comments need an email address because by default there's no way to receive emails for follow up comments unless you're using a plugin. Even right here on this blog I would say this very form I'm filling out isn't compliant with GDPR.

Any thoughts?