You don't even have to digitise the information, if you were to store your business cards in a structured filing system they would be under the GDPR too [1] [1

You don't even have to digitise the information, if you were to store your business cards in a structured filing system they would be under the GDPR too [1] [1] See definition of personal data: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/key-definitions/ https://ico.org.uk/for-organisations/guide-to-the-general-da...