How not to get into money when processing personal data?

Question

Personal Information

The question is in the title. There is a system for working with clients, only the administrator can add a client to the database, after asking the client for the necessary data. Data List:

1. Full name
   
2. Telephone
   
3. Date of Birth
   
4. Email
   
5. Floor
   
6. A photo
   

The site provides functionality that, by phone number, will allow the client to view data on their allowable purchases.

Answer 1

Minimum - to force to leave consent to the processing of PD.
Maximum - register as a PD operator in Roskomnadzor.

Answer 2

Based on these data, it is impossible to uniquely identify a person.