Overview
May 25, 2018, is around the corner and many people (including
privacy professionals) are anxious and doubtful about certain
enforcement aspects that the General Data Protection Regulation
(GDPR) will bring with it, as soon as it is applicable as provided
by its article 99.2.
One of the many changes that GDPR is introducing is its
territorial scope rules. These rules will make GDPR one of the most
impacting European laws in recent years, and it will obligate
certain companies to rethink the way they are providing time,
efforts and money to data protection compliance.
Article 3.2. of GDPR has a lot of history, but let's just
say that when approved the European Union (EU) was ready and
determined to make it clear: we will protect personal data of data
subjects who are in the Union from whoever process them and despite
the place of the world such processing occurs. We shall not forget
what the EU legislator said in recitals 23 and 24:
