1. Provisions of this Decree by Law shall apply to the processing of all or part of the Personal Data by means of electronic systems which operate automatically, or by other means, by the following: 2. Each Data Subject residing in the State or having a place of business in it. b. Each Controller or Processor residing in the State and carrying out the activities of processing Personal Data of Data Subjects inside and outside the State. c. Each Controller or Processor residing outside the State and carrying out the activities of processing Personal Data of Data Subjects inside the State. 2. Provisions of this Decree by Law shall not apply to the following: a. Government Data b. Governmental entities which control or process Personal Data. c. Personal Data held by the security and judicial authorities d. A Data Subject who processes his/her data for personal purposes. e. Personal Health Data that has legislation regulating its protection and processing. f. Personal banking and credit data and information that have legislation regulating their protection and processing. g. Companies and establishments located in free zones in the Country and have special legislations regarding Personal Data protection.
Interpretation and application must be checked against the official text and current version.