Right to be forgotten
People have the right to leave your website and have you not store personally identifiable information about them. Provided, of course, that doesn’t violate any other laws.
Right to take your data elsewhere
Data must be in a commonly used and machine-readable format upon user request.
Privacy by Design
Only ask for data you actually need.