If I create free software that concretely and demonstrably aids in worldwide human trafficking and has negligible utility elsewhere, would you still consider my refusal to comply with regulation reasonable because my software was free?
How free the software is not a determining factor, either morally or legally, in determining whether or not the GDPR is or should be applicable.
