3 ms·
One aspect is that for companies within EU it applies for everyone - i.e. if you're an EU company which serves 100% only Chinese and Brazilian individuals and n
by PeterisP 5y ago
One aspect is that for companies within EU it applies for everyone - i.e. if you're an EU company which serves 100% only Chinese and Brazilian individuals and noone within EU, GDPR still applies to you and how you must handle the data of individuals so they all get GDPR rights. Citizenship and residence matters only for foreign companies doing business in EU.
- colejohnson66 5y agoSo, if I’m an American who has never been to the EU, could I file a GDPR request against Google Europe or whoever?
- 0xdeadb00f 5y agoYes
- PeterisP 5y agoYou could, however, IMHO the result would be that "Google Europe" (in my case, Google Ireland Limited) would notify that they and their subsidiaries have no data on you since they do not deal with your data in any way as you are the customer of "Google USA" and not their customer, unlike all the users Google thinks are in EU and switched their accounts/contracts/etc to the EU subsidiary. And if your data is processed by "Google USA", then GDPR applies to that processing only if you are "a data subject in the Union".