Hi. CComment in its present form is not GDPR compliant. The user must confirm that he agrees to the storage of his data.
I would say: Anyone who uses ccomment in the current form from 25.5.2018 can be sued.
An interim solution could be that the fields for name and email are no longer displayed. Is that possible somehow?