I disabled them for normal users.
EU Law does not prevent anyone from exposing your personally identifying information (PII), it only says that you have to be told what is being exposed and you must have the option to remove it (by any means, including just removing access to your account and scrambling the username).