Hacker News new | ask | show | jobs
by modernerd 2999 days ago
GDPR applies if:

- The data is processed by a company established in the EU (it does not matter where the person / “data subject” is).

- The person is in the EU (whether or not they are an EU national).

“Data subjects” are not protected outside the EU against companies established outside the EU.

From https://cybercounsel.co.uk/data-subjects/ under “Territorial expansion and applicability of EU law”.