In essence it is the same as when you're dealing with a company.
So you might sign up to a website, provide some data and they might hold that data and also do something with it.
This is the same with giving your friends and family your phone number. You've provided them the data and they then hold it, and may then do something with it.
In both cases what they do with it would have to be within the bounds of the GDPR and based on what was agreed upfront with you and the other party. Which unless you're weird is most likely going to be that nothing was agreed when you gave your number to your friend/relative.
So technically what that means it would be your friend/relative in the wrong - not who they gave the information to.
Then when they ask for access to your contacts don't give them access to your contacts? I refused them access.
You can't complain about them having access to your contacts if you literally gave them access to your contacts.
6 Comments
sorted bySo you might sign up to a website, provide some data and they might hold that data and also do something with it.
This is the same with giving your friends and family your phone number. You've provided them the data and they then hold it, and may then do something with it.
In both cases what they do with it would have to be within the bounds of the GDPR and based on what was agreed upfront with you and the other party. Which unless you're weird is most likely going to be that nothing was agreed when you gave your number to your friend/relative.
So technically what that means it would be your friend/relative in the wrong - not who they gave the information to.
You can't complain about them having access to your contacts if you literally gave them access to your contacts.