The Data controller establishes the uses for which and the implies by which private information is processed. The GDPR shields personal knowledge whatever the technological know-how used for processing that data. It's engineering neutral and relates to equally automated and manual processing, supplied the information is organised in accordance with https://www.nathanlabsadvisory.com/nerc-cip.html