With Christine Jackson
The GDPR applies to any organisation that has control over personal data as well as those that process personal data on behalf of another organisation.