3 ms·

Does the EU have any other extra-territoral law as far reaching as the GDPR? Or any other extra-territoral law? A business shipping something to the EU doesn'

• jacquesm 9y ago
  The GDPR is not an extra-territorial law. It merely concerns itself with EU citizens.
  • prewett 9y ago
    If the law applies outside the EU (for instance, if EU citizens travel to a non-EU country), then it is an extra-territorial law. As far as I understand the discussion here (which may or may not correspond with the actual law), the GDPR goes with the person. Wherever an EU citize goes, that EU citizen must be able to be forgotten, despite if the location they are in is outside EU jurisdiction. That is practically the definition of extra-territorial. Now, would an EU court rule that someone who kept permanent records of an EU citizen be violating the GDPR if the business has no EU presence? In the American system (imagining if the US passed a GDPR and prosecuted a non-US citizen), no, because the government would not have standing to sue: the violation took place outside of US sovereignty. If the EU takes a similar approach, then the law is not extra-territorial in enforcement, otherwise it is.
    • jacquesm 9y ago
      EU citizens outside of the EU are out of scope for the GDPR.
      • com 9y ago
        Could you point at the language that unambiguously says that? Edit: GDPR Recital 23, Article 3(2)(a). Excellent!