What if I have confidential information or software that can access confidential information on my phone.

Now when the rent-a-cop futzes with my phone, it's a GDPR violation. But am I to blame or the border agent?