This law applies to all natural and legal persons who process personal data wholly or partly through automated means, as well as to manual processing where personal data forms part of a filing system. It encompasses the collection, storage, use, transfer, and erasure of personal data, regardless of the industry or sector.