Nostr seems incompatible with GDPR. I wouldn't be surprised to see the EU get heavy handed with companies that touch nostr.

The distributed nature of relays make it so hard to truly purge data from the network.