Intelligent Digital Mesh Leading the Top 10 Strategic Technology GDPR – Rights of the Data Subjects PPT | Page 4

What’s General Data Protection Regulation (GDPR) (contd.) According to the Article 3 of the GDPR, it specifies that if you collect personal data or behavioral information from someone in an EU country, your company is subject to the requirements of the GDPR. Two points of clarification should be noted: o The law only applies if the data subjects, as the GDPR refers to consumers, are in the EU when the data is collected. EU laws apply in the EU. For EU citizens outside the EU when the data is collected, the GDPR would not apply. o A financial transaction doesn’t have to take place for the extended scope of the GDPR law to kick in. If the organization just collects "personal data", as part of a marketing survey, then the data would have to be protected GDPR-style ©2018 GAVS Technologies Confidential 4