The General Data Protection Regulation (GDPR) applies to any organization that processes the personal data of individuals residing in the European Union (EU), regardless of where the organization itself is located.

This means that any company or organization, regardless of its size, that processes personal data of EU residents must comply with the GDPR. This includes companies based outside the EU, if they offer goods or services to EU residents or monitor the behavior of EU residents, such as through the use of cookies on their website.

In addition to companies and organizations, the GDPR also applies to individuals who process personal data on behalf of a company or organization, such as employees or contractors.

It's important to note that the GDPR applies to any type of personal data, whether it is stored electronically or on paper, and includes any information that can be used to identify an individual, such as names, addresses, email addresses, IP addresses, and more.