Re: Uh huh...
"Do tell, where in the GDPR does it say that? (or even mention passwords?)"
"Even though passwords are not specifically mentioned, Regulation (EU) 2016/679 does stipulate that “a high level of protection of personal data” is required. GDPR also requires safeguards to be implemented that prevent the abuse, unlawful access, or transfer of personal data."