Originally Posted by
veresch
@
fransknorge, unfortunately, I am not a lawyer so I can't answer this question for you. As I mentioned before if someone doesn't want to use our service they don't have to. If someone started using our service and decided they want to leave they have a way to completely purge all the data (delete their account and leave). Unfortunately, I can't answer your question beyond that.
I'm not a lawyer either - but my GDPR expert friend tells me that the regulation doesn't work that way !
It sounds like you really need to refer this question to *your* lawyer, and look at suspending collection of financial data of EU citizens before you get reported to an EU information commissioner.
Your lawyer might find this useful:
https://ico.org.uk/for-organisations...or-processing/