I interpret this as a systemic issue (procedure, they) which happens regularly or always (procedure, anyone). It makes me imagine a wiki page “Vandalism cases on wikipedia” containing a table of cases with date, article, edit, and IP/account, existing for months or years frequented by wikipedia mods and admins.

That’s right! That’s exactly the format they used in these procedures, which sometimes branch over onto “sockpuppet investigations” casepages. The other day I approached an Europe-based digital rights lawyers group and they agreed with the assessment that these pages do indeed constitute violations of General Data Protection Regulation. The only problem is that they have to find a victim who’s willing to be a complainant in order to initiate a formal complaint.

A few months ago the Italian data protection authority ruled that Wikipedia isn’t exempt from the privacy regulation in some way.