Third, a controller or processor not set up within the EU is going to be topic to your GDPR if it procedures the non-public data of information subjects during the EU Which processing is connected to the “checking” inside the EU on the “behavior” of knowledge topics as their habits https://cyber-security-consulting-in-usa.mystrikingly.com/blog/nathan-labs-advisory-premier-cyber-security-services-and-information