2 ms·
No, the GDPR applies to processing or control of personal data of EU citizens. There's even an explicit "what about if neither of those are in the EU(not Europe
by sofixa 4y ago
No, the GDPR applies to processing or control of personal data of EU citizens. There's even an explicit "what about if neither of those are in the EU(not Europe):
This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to:
the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or
the monitoring of their behaviour as far as their behaviour takes place within the Union.
https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/
I'm not sure an American court fits either of those conditions, but it's absolutely not limited to companies doing business in Europe.
- sgjohnson 4y agoThey can claim extraterritoriality all they want, but they have no recourse whasoever if the data controller or processor has no presence in the EU. What are they going to do? Send them a mean letter?