The European Data Protection Board Issues Guidelines On GDPR's Territorial Scope

The European Data Protection Board ("EDPB" or the "Board") recently released new draft Guidelines 3/2018 on the territorial scope of the European Union's ("EU") General Data Protection Regulation ("GDPR") (the "Guidelines"). The Guidelines are intended to provide a common interpretation of Article 3 of the GDPR, and provide further clarification on the application of the GDPR–particularly where the data controller or processor is established outside of the EU. The EDPB has published this first version of the Guidelines to allow for public consultation about its contents until January 18, 2019, at which time the EDPB will issue a final version incorporating any changes or amendments made on the basis of comments received from stakeholders. The Guidelines are intended to assist both relevant data protection authorities and businesses by providing a common interpretation on the scope of application of the GDPR. We've broken them down and highlighted some of the key