Scope of Application of the GDPR

The GDPR has a broad scope of application, both in terms of its territorial and material scope. Therefore, it is even applicable to many non-EU companies. Companies that maintain offices or employ staff in the EU should first and foremost check whether these business activities lead to an establishment in the EU, as this could lead to the applicability of the GDPR. However, companies may be regulated by the GDPR even without an establishment in the EU, e.g. if they provide goods and services in the European domestic market. This chapter details which companies are affected by the GDPR due to their business activities as they fall under the personal, material and territorial scope of the Regulation.