In accordance with the GDPR, the DPA applies to all organisations that process any form of personal data. It also affects organisations that process sensitive data related to law enforcement and national security.