GDPR issues?

Is there a need to add a comment Re: GDPR when interacting w/ the user, specifically when storing information about them in the repository? One of my model CLAs has a statement like this in the document, but would CLA Bot need to comment on it as well?