I’ve been watching and reading this thread for a while. I find it kind of funny how the arm chair lawyers all think they know/understand what the new requirements are but probably haven’t even read it, or read it correctly as a lawyer would.
Go back and re-read the different links you’ve provided showing why Plex MUST do this or that. While reading your links note terms such as TARGETED, GENERIC, OPTIONAL, PERSONAL and the like.
As an example if I run a site in the USA that doesn’t target you in the EU but you find my site and decide to use my services and I collect NON PERSONAL data I’m just fine. If the data on all my “users” is stolen but there is not any identifiable info who has been hurt except my business data? I can sell you items and collect information needed to ship items to you which are personal and I’m still just fine. Visa, MC already have this covered for the most part and if I separate your financial info from your personal info even better. Most financial transactions have been like this for a long time. The Financial provider will take care of that and give me a payment token, not your CC data, billing address, etc.
On the other hand if I’m collecting information of a personal nature without your consent that is different. If I target the EU with a survey that is generic and non personal I’m fine. If I’m collecting personal info (address, name, etc) it’s different.
Collecting information on a piece of software or web site of how many people use this page or that page in a generic fashion is fine. If I track how many people hit my XYZ page that isn’t personal. If I track specifically every page you specifically visit that is personal. Tracking YOUR SPECIFIC use is problematic without your consent. So for example if what Plex is doing is tracking how many people playback MP4 vs MKV or how many SD vs HD vs 4K items people have in general without it being tied to specific people then there isn’t a problem. None of your personal information has been violated.
It’s similar to having someone stand on the side of a road counting cars to see how busy different roads are so the city can better know what roads to fix first. This would be generic data gathering. Now on the other hand if someone was following you specifically around to see what roads you use, then this is personal and problematic.
With that said Plex should allow easier OPT IN/OUT in general regardless of where you live. Regardless of any laws there is popular opinion of what is right or wrong and choice is always seen favorably.
What these laws are trying to do at the most basic level is stop theft. Yes, someone taking your personal identifiable information without your consent is theft. Someone using your personal identifiable data or services without your consent or reward is theft. Someone using generically gathered data is just doing smart business.
A simple way to think about it is if the data gathered was exposed who could be hurt? Could you the specific user be tied to this data?