Everything is echoing from the EU regulation these days, in fact it has been for quite some time . In the meantime, the essence is lost... The media simply do not get the full significance of it.
Conspiracy theorists have been talking about an Orwellian world for quite some time, perhaps not without reason.
It seems exceptionally appropriate to ask back: Who is asking? Well, not because there are exceptions to which it does not apply, but to be able to answer the second, "how" question... both are affected, but it does not matter from which position.
Based on the questions above, it can be assumed that the questioner already knows, but it does not hurt to clarify what the GDPR is.