3rd, a controller or processor not set up during the EU will be topic into the GDPR if it processes the private data of data topics in the EU and that processing is relevant to the “checking” in the EU of the “habits” of knowledge topics as their actions requires https://vcisoservicesinusa.blogspot.com/