Territorial application: The GDPR applies to non-EU organisations if they: (i) offer goods or services to individuals in the EU; or (ii) monitor the behaviour of individuals in the EU. Many ...