GDPR: which countries does it apply to?

GDPR isn’t just for the 27 EU countries—it also covers Norway, Iceland, and Liechtenstein in the EEA. Plus, even companies outside these regions need to follow GDPR if they handle the personal data of people in the EU or EEA. This means that if you’re offering products or services, or tracking people’s behaviour in these areas, you’ll need to comply with GDPR’s rules.