Which countries are part of GDPR?

GDPR isn’t just limited to the 27 EU countries—it also applies to the EEA countries like Norway, Iceland, and Liechtenstein. But even if a company is outside these areas, if it handles data from EU/EEA residents, it has to comply with GDPR. The idea is to make sure that data protection is consistent, no matter where the data processing happens, so people’s personal information is kept safe no matter what.