GDPR Scope

GDPR coming into force Uniformity within all European countries No need for EU member states to implement GDPR with national laws Immediately and directly applicable across 28 EU member states

Expanded territorial scope Establishments in the EU Real exercise of activity more than Establishments’ legal form Establishments outside the EU Subject to GDPR if it processes personal data: of data subjects who are in the Union (includes residing even if not EU citizens) + the processing relates to: offering of goods or services (payment is