> I need to collect it and store it to comply with other laws, now I need to verify that the particular way I collect and store that data isn't violating some other new law.

Have you seen this? It seems to say that GDPR allows you to do what you're doing.

https://gdpr-info.eu/art-6-gdpr/

> processing is necessary for compliance with a legal obligation to which the controller is subject;