Comment by notananthem

"it applies to any entity (any person, business, or organization) that collects or processes personal data from any person in the European Union"

It should