The RSI Security web site breaks down the measures in certain depth, but the procedure in essence goes similar to this: The GDPR safeguards own information whatever the technologies used for processing that data. It can be engineering neutral and applies to each automated and handbook processing, supplied the information https://www.nathanlabsadvisory.com/difc-data-protection-compliance.html