Anyone who stores or processes information about identifiable natural persons within the EU must comply with the Data Protection Regulation.
There are some exceptions, including:

  1. certain authorities
  2. private individuals who process personal data for private use