Everyone has the same rights. Francesca has the right to spout nonsense. Joshua has the right to tell everyone she's doing it. The government doesn't care about either.
This is a site where we discuss about privacy in technology, and this is an example of how people with privileged access to PII should follow the higher standards, no matter how disgusting are the opinions, like the ones from Francesca.
And the agreement between Disqus and a university lab isn't law.
The GDPR doesn't really apply here in the US. No part of this dispute happened in the EU or to EU citizens.