According to some information, a person will need to be a resident in an EU country in order to be protected by the GDPR regulation.

Are there jurisdictions in North or South America where residency similarly conveys GDPR protection for EU citizens?

  • 1
    GDPR does not trigger on citizenship or residency status. Processing activities are subject to the GDPR when an EU establishment of the Data Controller is involved, or when Data Subjects who are physically in the EU are tracked, or when the Data Controller offers their services in the EU. Consequently, you are GDPR-protected anywhere on the world when interacting with EU Data Controllers.
    – amon
    Dec 16 '19 at 22:42
  • @amon, are you saying that if I as a EU citizen go to USA, I will be GDPR protected there as well (at least if dealing with any US organizations/corporations that have a EU presence)?
    – user100487
    Dec 17 '19 at 17:22
  • 1
    No, per Art 2 data processing of multinational companies is only subject to the GDPR when the processing is “in the context of the activities of an [EU] establishment” of the data controller. So a person is not protected when they interact with the US branch of a company.
    – amon
    Dec 17 '19 at 17:42

There are various bits of France which are not actually in Europe. Several of them are in the Caribbean, and French Guiana is in South America. See Wikipedia. These are parts of the EU (although not part of Schengen or the EU VAT Area), so residency will grant protection under GDPR.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.