> I don't need your consent for any of it, because even though the information may be about you, we understand that it's "my" data.
You do need content though, if I provide my email in a social setting I implicitly give consent to birthday parties etc. I didn't consent to you selling my email as part of a bundle. If people found out you were providing data to random people at least a stern talking to would happen.
Under GDPR it works this way for business too, just because I gave you data for a specific purpose doesn't mean you can do whatever you want with it. I'm not aware of other jurisdictions.
So if I give you my phone number and you store it in Google Contacts, and I later decide I don't want you to have my phone number anymore, under GDPR can I request that Google delete my number from your contacts? After all, I never consented to you sharing my phone number with Google.
You do need content though, if I provide my email in a social setting I implicitly give consent to birthday parties etc. I didn't consent to you selling my email as part of a bundle. If people found out you were providing data to random people at least a stern talking to would happen.
Under GDPR it works this way for business too, just because I gave you data for a specific purpose doesn't mean you can do whatever you want with it. I'm not aware of other jurisdictions.