The RSI security blog site breaks down the techniques in some detail, but the method in essence goes similar to this: The GDPR guards personal details whatever the know-how useful for processing that info. It really is technologies neutral and applies to both automated and manual processing, furnished the information https://www.nathanlabsadvisory.com/blog/tag/iso-27001/