Since the EU General Data Protection Regulation went into effect, under certain circumstances, territorial law subjects U.S. companies that process EU personal data to the GDPR provisions, even if these entities do not have any branches or subsidiaries in Europe. In November, the European Data Protection Board issued guidelines (for consultation) to clarify what could create “certain circumstances” when the GDPR would be applicable. In this article for The Privacy Advisor, Katya Kulesova, CIPP/US, sums up five key considerations in determining whether your company is subject to the GDPR.
Full Story