The RSI security weblog breaks down the measures in a few detail, but the method in essence goes similar to this: The GDPR safeguards individual knowledge whatever the technological innovation used for processing that info. It is actually technology neutral and applies to both of those automated and guide processing, https://www.nathanlabsadvisory.com/blog/author/nathan/page/4/