It's really funny and even ridiculous: they are lying even about not collecting the information about bitcoin addresses user generates with their Ledger Live application:


Their Privacy Policy clearly states that they collect user's information about "currency, time stamp, amount and status of transactions, transaction identifier, identifier used by our partners to identify you."

It has long been known that Ledger guys want to know everything about their customers, which is one of the reasons why they made it so difficult to purchase a Ledger device. Users have to undergo the full process of verification and identification if they want their products. You simply can't buy Ledger anonymously with cryptocurrency. In order to purchase, you have to use either your credit card that is already attached to your real identity and bank account or your verified account on PayPal, Crypto.com, BitPay that also will contain information about your identity. All that means that not only will Ledger know you purchased a hardware wallet from them, but also everyone else should a data breach occur, including your government should it request information from one of these entities.

The law will affect exchanges and non-custodial wallets, such as metamask, ledger and trezor, as I explained.