How does GDPR impact the contact list in a mobile phone?

If the phone is the property of the employer and if the internal company policy states that the data are stored in the phone (and the employer has developed a secure storage system), then GDPR affects the contact list. It should be emphasised that storing work-related client numbers and data in a personal phone is only allowed if the employer has prepared for data processing (storage).