Any person, company, partnership or organization that processes, stores and uses data of a personal nature in connection with an economic activity has to register under the Data Protection Act.
The Act makes certain exceptions, such as any entity that processes data in connection with state security, persons who work on their own (and do not employ other persons) or non profit making organizations that are exempt from the payment of tax.