First of all, the GDPR expands the catalogue of natural persons whose personal data is processed.