[kenbaylor]

Not true unfortunately under the GDPR nor it's predecessor, if the notes are publicly available:

Bodil Lindquist v Åklagarkammaren (2003) Mrs. Lindquist (whose purposes were mostly charitable and religious) published on a private home page personal data about her colleagues, including telephone numbers and information about a coworker’s injured foot and medical leave. This case raised the question if a private home page accessible to only those who have the address is permitted under one of the exclusions (household activity). The European Court of Justice ruled that it is not.

[wyattpeak]

A "private home page accessible to only those who have the address" is a public page.

That's not a private note, and I'd be livid if somebody was posting my contact and medical details online. I see no problem with this ruling, nor do I see it as evidence contrary to the idea that one may keep private notes.

[PhillipRed]

That's what the user wrote: It's only a problem if the notes are public.