thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Territorial Scope of GDPR

GDPR Article 3 rules defining when GDPR applies, including to non-EU organizations.

Definition

GDPR applies to processing in the context of an EU establishment regardless of where processing occurs, and to non-EU organizations that offer goods or services to people in the EU or monitor their behavior there. Indicators of targeting include EU languages, currencies, and shipping. Non-EU organizations within scope must usually appoint an EU representative.

Example

A Canadian app that tracks the location of users in Spain falls under GDPR.

Exam tip

Mere website accessibility from the EU is not targeting; intent to offer services is.

Related terms