This looks useful, but the problem related to CNIL etc is that CF is a US company so then it can be compelled to deanonymize the data. Wouldn’t this just kick the can down the road? IANAL but interested in this space.
Again, don't take this as a legal advice or anything like that - this is just to say we're doing everything we can to help users comply.