The information controller decides the needs for which as well as means by which private info is processed. The GDPR protects individual info regardless of the technology employed for processing that knowledge. It is technologies neutral and applies to the two automated and manual processing, supplied the info is organised https://www.nathanlabsadvisory.com/blog/tag/strategic-consulting/