Previously membership list was given out, without any due care and was given out by our organisation, which included Names, address, membership number etc.

The new committee understands this is a breach of GDPR and also registered themselves to ICO.  There are few individual that requesting the membership list, which new committee have put a stop to. 

There are no specific rules or opt out option provided to the member as such.  Could one provide the member list on request to any current member? I imagine, as each term of appointment completes every 2 years, they wanting to approach members for voting purposes. Thoughts?