Any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.

Since GDPR applies to the processing of personal data in both automated and manual means the usage of a relevant filing system is an integral part of being GDPR compliant. The filing system is an essential part of having control over your personal data.

For more information regarding an appropriate filing system for GDPR compliance, see ICO guidelines.