It does have an exemption that works for everybody: don't track your users, and don't keep data you don't need. Problem solved.