Pretty much. If EU citizens are targetted then it applies. “Provided your company doesn't specifically target its services at individuals in the EU, it is not

Pretty much. If EU citizens are targetted then it applies. “Provided your company doesn't specifically target its services at individuals in the EU, it is not subject to the rules of the GDPR. ” https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/application-regulation/who-does-data-protection-law-apply_en https://commission.europa.eu/law/law-topic/data-protection/r...