GDPR is only applies when personal data is involved. Banks usually have all client data well isolated from everyone including most of IT staff so credit card da

GDPR is only applies when personal data is involved. Banks usually have all client data well isolated from everyone including most of IT staff so credit card data being stolen isn't always mean that personal data is affected.