Data protection regulations must apply to every firm that handles personal information. A few exceptions to this exist, including the household exemption.