Home » Legislation » GDPR » Recital 25Recital 25 Where Member State law applies by virtue of public international law, this Regulation should also apply to a controller not established in the Union, such as in a Member State’s diplomatic mission or consular post. This recital of the General Data Protection Regulation clarifies article 3 GDPR (Territorial scope).*