What's more, using the technology to store personal data would render it in breach of the privacy by design' principle of the GDPR