What businesses must comply with the GDPR?

General Data Protection Regulation (GDPR) applies to all businesses large and small, with few exceptions.
Companies with fewer than 250 employees must keep records of personal data
processing activities if it is a regular activity or contains sensitive data.