Zansa › Answers › Privacy, security and ownership

Does GDPR apply to my business if it is based outside the EU?

It can. GDPR has extraterritorial reach: a business outside the EU may still be covered if it offers goods or services to people in the EU or monitors their behaviour there. Location of the business alone does not decide it. This is general information, not legal advice.

For example, an online shop outside Europe that markets to and ships to EU customers is likely to be in scope. A business that only serves local customers and has an occasional EU visitor usually is not.

If you are covered, you may need to consider a representative in the EU in some cases. A qualified adviser can confirm how the rules apply to your facts.

Want this applied to your business? Zansa builds dashboards and forecasts for small and mid-sized companies worldwide. Start with a free intro call.

Book a call

Related questions

gdprterritorial-scopeinternationalcompliance

Published by Zansa · Last updated 2026-11-06 · Category: Privacy, security and ownership