An exemption is something that is not included within the scope of something.

For example, there will be an exemption under the GDPR for businesses that don't operate within the EU, don't process personal data, or if data is only processed for domestic purposes.

Under the CCPA, government agencies, nonprofits and some insurance industry businesses are exempt.