The Data controller determines the functions for which and also the suggests by which personal details is processed. The GDPR protects personal knowledge whatever the engineering used for processing that data. It's technological know-how neutral and applies to both of those automatic and guide processing, supplied the data is organised https://www.nathanlabsadvisory.com/blog/tag/security-culture/