Re: I feel left out
"123-reg as a result of GDPR don't automatically pass what could be PII data to Nominet."
As a result of yet another cock-eyed misinterpretation of the GDPR. Relying once again (erroneously) on consent as the lawful basis where legitimate interest (or quite possibly contractual necessity) would be entirely appropriate.
One day someone will actually read the GDPR before attempting to "comply" with it.