Re: Texas - Europe ?
"if you e.g. have your employee's names and contact numbers, that very much *is* PII..."
That's true, but if you have a business reason to store them, such as the ability to contact employees and ex employees for HR purposes then you're fine. Naturally you need to manage that info and have lifecycle processes, but GDPR was designed with these scenarios in mind. Sadly it's nearly 70 pages long so most people don't read it and instead make wild assumptions based on sales seminars.