Anyone who stores or processes information about identifiable natural persons within the EU must comply with the Data Protection Regulation.
There are some exceptions, including:
- certain authorities
- private individuals who process personal data for private use