This topic describes general guidelines on GDPR, and what to think about when collecting PII, deleting data and so on.
You can only suggest edits to Markdown body content, but not to the API spec.