This is an old revision of the document!
Whenever you are working with personal you do have to use GDPR compliant data sharing tools