Hacker News Reader

Note FDA rules require them to retain the data for a few years.

Any idea what the reasoning behind these FDA rules is?

European here: I can't wait to use my gdpr superpowers to cause an expectation violation there.

Doesn't the GDPR have an exception for data required for legal reasons?

Anyway, an US lab won't care about it.

It has some cut outs, but not as many as you would think.

The US lab is marketing to EU customers. They will care about GDPR (heck, they even claim to be compliant on their website).