In reply to Heather Burns.

Wow, thank you Heather. This puts things in a different light.

Two questions:
1. For this to be really GDPR compliant users need to be informed of the processing, right?

2. Under what GDPR-base would the preventing of trolling, harassment, and sock puppeting fall? The same as security?