I work for an EU company based in the UK and often work with clients in China and Africa (and some other non-EU countries). In the future, it may arise that we will be storing some personal information on citizens from these countries and was wondering what the GDPR laws were with reference to an EU company storing non-EU citizen data?
I thought GDPR was to protect the data/information of EU citizens (from Wikipedia):
General Data Protection Regulation (EU) 2016/679 ("GDPR") is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA).
but wasn't sure if personal information outside of the EU was also protected.
Short version: are there any GDPR considerations that must be in place when an EU company stores personal information from citizens outside of the EU?