[h0mEDw]

Thanks, I'll look out for that. @tapland and @jgibson also mention that mobile networks often outsource running the infra.

In any case - I agree with you that this seems like a shitty legal pseudo-loophole. At the very least the company you sign mobile contract with needs to share your phone number with those infra subsidies. But then according to GDPR: "15. 1. The data subject shall have the right to (...) access to the personal data and the following information: (...) (c) the recipients or categories of recipient to whom the personal data have been or will be disclosed". Following this rule one should be able to reach the bottom of the data processing chain.

[lucb1e]

Yeah, I read the same clause. The crux is this:

> or categories of recipient to whom the personal data have been or will be disclosed

They provided that by saying it's for network operators.

[h0mEDw]

Ugh. Thanks for pointing it out.