Who does not have to comply with the GDPR?

  1. Certain state bodies, including intelligence agencies, the police and the courts, will be governed by separate national rules.

  2. Individuals are exempt if they are collecting data for ‘personal or domestic use’ – for example if they store personal contact details on their phone.

  3. Churches can maintain their own regulations for the protection of personal data and their own bodies supervising this area – but their rules must still be in line with the GDPR.