The Personal Information Protection (PIPL) applies to "personal information processing entities," defined as an organization or individual that independently determines the purposes and means for processing personal data.