Comment by tooba

2 years ago

GDPR protects individuals 'natural persons' and not businesses 'legal persons'

Recital 14 - The protection afforded by this Regulation should apply to natural persons, whatever their nationality or place of residence, in relation to the processing of their personal data. This Regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person.

At least in German juristiction there is the viewpoint that a law should also be applicable to a legal person if it indirectly affects a natural person behind it (so-called "Durchgriffstheorie"). In other words, the GDPR applies when it comes to protecting the natural persons behind the legal person, including their economic existence.