Article 2 GDPR
Material scope

1. This Regulation applies to the processing of personal data by fully or partially automated means and to the processing by non-automated means of personal data that are part of a filing system or are intended to be part of a filing system.

2. This regulation does not apply to the processing of personal data:

(a) in the context of activities outside the scope of Union law;

(b) by the Member States in carrying out activities falling within Chapter 2 of Title V of the TEU;

(c) by a natural person in an activity of a purely personal or domestic nature;

(d) by competent authorities for the purposes of preventing crime, conducting preparatory proceedings, detecting and prosecuting prohibited acts or carrying out sentences, including protection against and prevention of threats to public security.

3. Regulation (EC) No 45/2001 applies to the processing of personal data by Union institutions, bodies, and agencies. Regulation (EC) No 45/2001 and other Union legal acts applicable to such processing of personal data shall be aligned with the principles and provisions of this Regulation in accordance with Article 98.

4. This Regulation is without prejudice to the application of Directive 2000/31/EC, in particular to the rules on the liability of intermediary service providers referred to in Articles 12-15 of that Directive.