Am I affected? - GDPR
It seems exceptionally appropriate to ask back: Who is asking? Well, not because there are exceptions to which it does not apply, but to be able to answer the second, "how" question... both are affected, but it does not matter from which position.
Based on the questions above, it can be assumed that the questioner already knows, but it does not hurt to clarify what the GDPR is.