This seems like an extreme reaction to GDPR: what data is The Baltimore Sun keeping that breaks the new privacy rules?