> - Federation makes it challenging to be GDPR compliant

Can you elaborate? AFAIK when everything is encrypted, GDPR compliance is trivial.