The RSI security website breaks down the steps in some detail, but the process in essence goes such as this: The GDPR shields personal facts whatever the technological innovation useful for processing that info. It's technologies neutral and applies to equally automatic and guide processing, delivered the information is organised https://www.nathanlabsadvisory.com/cis-center-internet-security.html