For GDPR purpose, the user table should store some additional information when registration:

• date of registration (force non null ?)
• origin of account creation: forced (by admin), free registration or registration on invitation
• additional information on origin: login#population if forced, url of page registration on free registration, ...

Add logs to trace activities linked to the account creation