[detaro]

Article 2:

> This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.

Which makes sense, just keeping customer data on paper instead of in digital storage shouldn't mean you don't have to protect it.

[threatofrain]

Ah, it says automated. I wonder if that mean manual human input changes things, even manual human input in Excel.

[detaro]

Don't think it does. Basically everything involving a computer probably qualifies as "automated", and an Excel document is probably structured enough to be a "filing system".