Its a big open question until there is precedent but the GDPR is explicit that residency and citizenship aren’t required. Most people are taking the position t

Its a big open question until there is precedent but the GDPR is explicit that residency and citizenship aren’t required. Most people are taking the position that if either end of the request is in the EU or owned by an EU entity its covered.