My wording wasn't quite right. GDPR refers to "personal data". I don't think all data about a person is "personal data" to be controlled by that person according to GDPR.

* are my interview notes during the hiring process "personal data" subject to GDPR provisions (disclosure, destruction, etc). * are my business meeting notes with a contractor subject to GDPR?