Which companies does GDPR apply to?

Whether a company is big or small, if it’s handling data from people living in the EU/EEA, it needs to follow GDPR. This applies to businesses offering products or services in the EU/EEA or monitoring people’s behaviour there.

From online shops to targeted ads and data analytics, if your work involves the personal data of EU/EEA residents, GDPR matters to you. It’s not just about the company that decides how the data is used (data controller); it also applies to those who process the data (data processors). Both need to meet GDPR’s standards.