• GDPR and Privacy Shield: Different Tools for Different Goals
  • September 4, 2018
  • GDPR Article 3 is the key provision regarding the territorial reach of the GDPR. Under Article 3(1), the GDPR applies to the processing of personal data in the context of the activities of the establishment of an entity in the European Union. In practice, the protection extends to individuals located in Norway, Iceland, and Lichtenstein, because, like most laws of the European Union, GDPR is incorporated into the laws of these three countries, and thus its scope covers the entire European Economic Area (EEA), which is comprised of the European Union and these three additional countries