The regulation applies to data of residents of the European Union, managed by companies and entities, organizations in general, also with registered offices outside the EU who process personal data of residents of the European Union. Regardless of the place or places where the data is located, analog (Paper) or digital (Electronic) including the archiving (storage) and processing (server) systems. The regulation only regulates the processing of personal data.