Why collecting DMARC ruf= failure reports is a bad idea under GDPR

Failure reports may seem useful for diagnostics