I sent some money to a colleague's PayPal account who was collecting money for another colleague's leaving collection. I used the name of the colleague who was leaving as the note/reference on the payment.
A few days later I received an email from PayPal asking me to provide the date of birth of the colleague who was leaving and that the money would be held until the request was resolved. They claimed it was to meet regulatory obligations.
I called them and said I refuse to provide the info because I felt it breached GDPR laws and besides, it had nothing to do with them.