the largest assumption you are making is that the OP does business with the EU. If they do not, they are truly out of the jurisdiction of GDPR
GDPR applies to American enterprises if they process personal data of EU citizens.
If you serve a website which is accessible to EU citizens, and that site collects personal data or allows users to enter personal data, GDPR most probably applies to you. IANAL.
Nothing in biology is exactly identical between individuums. A common eye color is brown, although there are as many shades of brown as there are people.
It is just practical and how language, or even perception works, that we tend to categorize similarities, and strongly favor common occurrances over outliers.
Maybe you two aren’t even disagreeing?
I’d say the doctor tries to assign the new born into male or female according to biological sex, and gender is inferred from that.
Yes, that’s what I mean. A two-step process. First, biological expression is assessed. Next, based on #1, social gender is inferred.