Hi. Yesterday, a user on a TV show wiki that I administrate removed every reference to an actor's name from the site. As I could not verify the identity of the user, I rolled back their edits and blocked them from editing when they did it again. This morning, they posted a message on their talk page claiming that they had sent an email somewhere a few weeks prior but hadn't received a response and that the content removal was actioned under article 7 of the GDPR.
I'm not a lawyer, and I'm not well-versed in EU data protection laws, so is there anything that I need to do or worry about?