Most of this information could be made accessible to the end user via a personal dashboard and knowledge base.

GDPR will have broad implications. If you're not designing your services to be compliant there will be consequences.