This site has more info : https://www.eugdpr.org/gdpr-faqs.html https://www.eugdpr.org/gdpr-faqs.html But I would say government offices and public sector orga

This site has more info : https://www.eugdpr.org/gdpr-faqs.html https://www.eugdpr.org/gdpr-faqs.html But I would say government offices and public sector organisations do fall under this: ".. It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company’s location."