EDPB Guidelines on Article 3

Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)

The guidelines explain the territorial scope of the GDPR as defined in Article 3, focusing on the "establishment" criterion (Article 3(1)) and the "targeting" criterion (Article 3(2)). Additionally, the guidelines cover the requirements for non-EU entities that engage in processing activities as per Article 3(2) to designate a representative in the EU, outlining the responsibilities and process for this designation.