@jimcyl @neil_neilzone @eBay_UK Robust controls are a good thing, but it seems odd that the DPO is restricted to the extent they can't answer concerns. I'm guessing, though, that if I put a DSAR it'd meet the definition of "legally obligated" and would allow the DPO to check.