That changes when the GDPR comes into force: the Regulation applies to processing outside the EU that relates to the offering of goods or services to data subjects (individuals) in the EU or the monitoring of their behavior. [www.infolawgroup.com]