[zaarn]

Notifying banks will likely be required by their payment processor, not by the GDPR, those are two separate processes.