I wonder if #simjacker triggers GDPR, IMO it should.

Commands:
- PLAY TONE
- SEND SHORT MESSAGE
- SET UP CALLSEND USSD
- SEND SS
- PROVIDE LOCAL INFORMATION Location Information, IMEI, Battery, Network, Language, etc
- POWER OFF CARD
- RUN AT COMMAND
- SEND DTMF COMMAND
- LAUNCH BROWSER
- OPEN CHANNEL: CS BEARER, DATA SERVICE BEARER, LOCAL BEARER, UICC SERVER MODE, etc
- SEND DATAGET SERVICE INFORMATION
- SUBMIT MULTIMEDIA MESSAGE
- GEOGRAPHICAL LOCATION REQUEST

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile