GDPR Territorial Scope Beyond Europe
An organisation with no office, subsidiary or staff in Europe can still be fully bound by the GDPR. Article 3 settles that with two independent tests, and the representative obligation follows from only one of them. Where establishment ends and targeting begins, with the EDPB guidance that decides both.
