What about GDPR?

When serving EU users, Telegram needs to follow relevant privacy and data protection requirements and provide a privacy policy, data control explanations, and account management options.

If compliance matters to you, focus on its privacy policy, data export, account deletion, and permission control settings.