That actually will not pass the GDPR. The sysadmin should be able to GET access at all times. Not HAVE acces at all times. Therefore, ownership is much more interesting then actual userrights assignment.
Yes this scenario you mention can be usefull, but therefore I would not name add the (home$ share) reference to the mentioning of the option.