The GDPR right to be forgotten - applies from May 25th 2018
Using Jamroom
Just wanted to add here that Jamroom is (as far as I can tell reading the GDPR requirements) already mostly GDPR compliant. The only thing a site might want to change is their Privacy Policy and Terms of Service to use more appropriate "GDPR language".
The only thing we are working on right now is an update to the User module that allows the site to change the "notifications" tab - this allows you to pick whatever format may be easier for your users, since a lot of the GDPR is about making it easy for a user to see HOW they will be contacted and how their data is used.
Note that the data retention period for the GDPR is (as far as I know) still a gray area - I do not believe you have to automatically delete a user's account if they have not logged in in X days, but instead you just must make it easy for the user to delete their account and in turn have it delete ALL their data (which JR already does).
Let me know if that helps or you know of a GDPR requirement that needs support on our end.
Thanks!