At a glance, while Debian shouldn't distribute it and the community should certainly fork, I'm not sure it's technically a GPL violation. Is there a clickwrap page requiring you to agree to the privacy policy to use audacity? Does Audacity as they distribute it involve any network-related services?
GPL packages are allowed to ship with privacy policies (although they usually don't need them), and those policies normally cover your use of certain services alongside the software (here, telemetry services, which you're hardly "using," but you know, use a fork). Now, you can't be required to agree to the policy to use Audacity... that's a problem for them, but are they requiring it? As I mentioned above -- is it clickwrapped, or just linked to on their website?
Regards,
Daniel J. Hakimi
B.S. Philosophy, RPI 2012
B.S. Computer Science, RPI 2012
J.D. Cardozo Law 2015