The new GDPR obliges all persons, companies and organizations that process personal data to comply with a series of requirements and to apply certain security