The EU General Data Protection Regulation (GDPR) affects millions of businesses. The GDPR is wide-reaching in many different ways: It applies to companies all over the world. It covers individual people, charities, and businesses of any size.

Does GDPR cover private individuals?

The GDPR applies to processing carried out by organisations operating within the EU. ... The GDPR does not apply to certain activities including processing covered by the Law Enforcement Directive, processing for national security purposes and processing carried out by individuals purely for personal/household activities.

Does GDPR apply to citizens or residents?

The whole point of the GDPR is to protect data belonging to EU citizens and residents. The law, therefore, applies to organizations that handle such data whether they are EU-based organizations or not, known as “extra-territorial effect.”