The guidelines act as a framework for how corporate companies – particularly those in “third countries” – process personal data relating to potential or current employees, customers, suppliers, other business partners, potential customers, and other affected parties.