Freely sharing your friends' data without their permission may be a GDPR violation.
> because even though the information may be about you, we understand that it's "my" data.
That's just not true. Why would you think that?!
Absurd, how would an email provider or social network even work if you couldn't enter your friends contact information.
If you go back to the Wild West of the Facebook apps, shortly after platform launch there was an app for everything - apps for fancy birthday cards with birthday reminders, as well as polling apps telling you which one of your friends is the biggest cheesecake lover.
Every piece of data can be spun into being essential.
Which is what CA has built.
Not just them - any survey app claiming to help you find out “which Game of Thrones characters you and your friends are” can arbitrarily claim those data points as necessary.
An app to help you find out "which Game of Thrones characters you and your friends are" can arbitrarily claim those data points, and then use them to discover which Game or Thrones character you and your friends are. On that case, even storing the data looks like a violation, even more sharing it with anyone.
You're joking, right? Ever played a video game before? Add by user name. Share a link... There are tons of options without sharing real-world data.
GDPR is for businesses. Me giving out your phone number as an individual is just being a jerk.
People subject to EU law should keep that in mind, then.