The whole point is that "your" logs contain personal data about others. That data is theirs not yours. Moreover if you get asked about "your" logs by the US government you have to hand "their" data over to them, for which there is no legal recourse for the person owning the data.

To make this more obvious, the EU is essentially saying that you can create a post service that routes all their letters through the US where they can be opened by the FBI, without any legal recourse.

I'm always amazed how people (even very technical) argue that things are perfectly fine for electronic data when they would completely oppose the same thing for physical things, e.g. letters. I guess years of propaganda have worked

> That data is theirs not yours.

I fundamentally disagree. You can't come to my house with a red hat then demand I never tell anybody you have a red hat and forget I saw it. That's absurd.

I dont think ownership of a red hat would be considered personally identifiable information under the GDPR.

I should have a right that you should not save my personal information longer than needed. Now what?

No, you shouldn't. If I make an observation, that's my observation, my data. I should have full rights to observations I made myself, regardless of if it involves you. Europe has this 100% backwards.

What would you think if somebody told you this, after following you or your kids the entire day, while taking pictures and notes?

It would be weird, but sure, no difference. This is what a private investigator already does legally.

Do you think some laws might apply to private investigators and how they do that work?

Not everywhere. It depends on the jurisdiction.

But surely an US private investigator would have to respect french laws when following people in France?

The core of the issue is about fundamentally transnational transactions, and who has jurisdiction in that matter.

You do, but not user’s ip addresses