Hello!
Welcome to G-day (GDPR day)! I just posted a blog post announcing our GDPR compliance statement:
https://blog.musicbrainz.org/2018/05/25/gdpr-compliance/
Which links to https://metabrainz.org/gdpr – the blog post doesn’t really contain much else that isn’t in the statement. Fortunately there aren’t any surprises in this blog post – our data protection standards have been quite high, so this process hasn’t been terrible for us.