When retailers signal a deal using a payment processor, they conform to be subject to fines whenever they are unsuccessful to maintain PCI DSS compliance. The GDPR shields individual facts regardless of the technologies used for processing that details. It's know-how neutral and applies to both automated and manual processing, https://www.nathanlabsadvisory.com/nist-800-cyber-security-frame-work.html