© GDPR EU 2025. All rights reserved.
GDPR: which countries?
Find out which countries are covered by GDPR, including EU member states and EEA countries, and its extraterritorial application.
GDPR isn’t just limited to the EU’s 27 member states—it also covers the three EEA countries: Norway, Iceland, and Liechtenstein.
But it doesn’t stop there. If a company outside of these countries offers services to, or monitors the behavior of, EU residents, they also need to follow GDPR. This wide reach helps ensure that people in the EU and EEA have their data protected no matter where the processing happens.
