Article 4 (6) of the GDPR sets the definition for a ‘filing system’. If the personal data that the company processes manually is in structured form and the processing is conducted in a database, then yes GDPR does apply. If the processing is one-off and the company does not use a database, then GDPR might not apply.
A Comprehensive Guide to Personal Data Mapping
Introduction Data privacy and security are of utmost concern in the digital era of today, especially when it comes to data protection regulations like the