No, it does not have to be automated, and if manual / email approaches work at your scale that's fine. The legislation explicitly refers to "proportionality",

No, it does not have to be automated, and if manual / email approaches work at your scale that's fine. The legislation explicitly refers to "proportionality", although people exploiting the FUD around it to drum up business rarely use the word.