If you collect or use personal data (information that identifies an individual like name, contact details, email addresses) then yes.

[PAUSE 10 SECONDS]

If you have employees / associates in your business, you will be collecting personal data about them and need to comply with GDPR / data protection laws.