Private info processing is usually completed by persons, or by personal or general public organisations, which include corporations or public authorities. Their duties and liability for particular data processing depend upon the role which they Perform within the processing in question. The GDPR guards private information regardless of the technology https://www.nathanlabsadvisory.com/blog/tag/penetration-testing/