3rd, a controller or processor not proven from the EU will probably be subject matter to the GDPR if it procedures the non-public data of information subjects while in the EU Which processing is related to the “checking” inside the EU with the “behavior” of data topics as their behavior https://bookmarkport.com/story19671153/cyber-security-consulting-in-usa