Fedora considers "privacy-preserving" telemetry

Specifically the relevant bit if GDPR is that the lawful basis can come via several things. Consent is one, but the most relevent would be legitimate interest.

“*The legitimate interests of a controller (..) may provide a legal basis for processing, (..) taking into consideration the reasonable expectations of data subjects based on their relationship with the controller.*”