Recital 22

1 Any processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union should be carried out in accordance with this Regulation, regardless of whether the processing itself takes place within the Union. 2 Establishment implies the effective and real exercise of activity through stable arrangements. 3 The legal form of such arrangements, whether through a branch or a subsidiary with a legal personality, is not the determining factor in that respect

This recital of the General Data Protection Regulation clarifies article 3 GDPR (Territorial scope).*

The reference between articles and recitals is based on the professional assessment of

Contact us!

Assistance with data protection?

Subscribe to our free newsletter!