The new EU GDPR privacy rules can apply to businesses outside of the EU that provide goods and services to EU data subjects. It is important for businesses outside of the EU to know when they are subject to the GDPR, as penalties for non-compliance are significant. An occasional sale to someone in the EU probably won’t be an issue – but what will?
The European Data Protection Board just released for public consultation draft guidelines on when the GDPR applies to those without a presence in the EU.
Article 3(2) of the GDPR says it applies to businesses without . . . [more]