Yes, but that is already legally required. If you aren't storing a name but storing a phone number, and somebody has asked you to delete his personal data, you have broken the law.
Your phone number is personal information, so they are. They aren't allowed to save your phone number from your friend's phone scan in the first place.
Doing that kind of thing is a serious crime. In Sweden it'd be something like "unapproved intelligence activity against a person" with a multi-year prison sentence, since you're gathering data about someone by deceptive means. We're thus not talking about GDPR any more, but about prison sentences for espionage-adjacent stuff.
cyanydeez|5 days ago
That's the shadow..
impossiblefork|5 days ago
Doing that kind of thing is a serious crime. In Sweden it'd be something like "unapproved intelligence activity against a person" with a multi-year prison sentence, since you're gathering data about someone by deceptive means. We're thus not talking about GDPR any more, but about prison sentences for espionage-adjacent stuff.