Applicability of the GDPR

The GDPR applies to any person or organization which processes the personal data of EU citizens or residents, as explained in Chapter 1, article 2.

Notable mentions here include:

  1. The GDPR applies to entities located outside of the EU. 12
  2. The GDPR does not apply to a natural person (as opposed to an organization) in the course of a purely personal or household activity. 3

  1. GDPR Chapter 2, Art. 3, clause 1 states: “This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not.” ↩︎

  2. Recital 23: Applicable to Controllers/Processors Not Established in the Union if Data Subjects Within the Union are Targeted ↩︎

  3. GDPR Chapter 2, Art. 2, subclause 2(c). ↩︎