1

Our company is based in the UK. We have users who are located in the USA, are these users protected by GDPR?

Any help on this questions would be much appreciated!

Improve this question
3
  • 3
    From a non-legal, purely practical perspective, since you have to implement GDPR rules anyway for some customers, why spend the extra money and make exceptions. The most cost effective way to handle it is to grant them to everybody and be done with it.
    – nvoigt
    May 31 at 13:35
  • Don't forget you also need to comply with CCPA for California residents
    – Nicolas Formichella
    May 31 at 14:17
  • 1
    @NicolasFormichella also this year CPRA (update of CCPA), VCDPA (Virginia),CPA (Colorado), UCPA (Utah), CTDPA (Connecticut)
    – Lag
    May 31 at 14:22

1 Answer 1

Reset to default
3

Yes

When personal data is processed in the context of an EU/EEA/UK establishment (for example, by a company with offices in the UK), then all these processing activities must fully comply with the GDPR, regardless of where the data subjects are located.

For the UK GDPR:

This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the United Kingdom, regardless of whether the processing takes place in the United Kingdom or not.

For the EU GDPR:

The GDPR applies to:

  1. a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or

…

Improve this answer
0

Not the answer you're looking for? Browse other questions tagged .