Why would these be unaffected? You have to comply with GDPR as soon as you start processing personal data.
https://www.reddit.com/r/sysadmin/comments/8litn7/gdpr_for_h...