Private citizens, as individuals, are considered data subjects under the GDPR and are therefore protected by the law. However, as private citizens, they do not have the obligation to comply with the GDPR. Instead, it is the controllers and processors of their personal data who are required to comply with the GDPR when processing their personal data...
