3rd, a controller or processor not established from the EU will probably be subject matter towards the GDPR if it processes the private data of information topics during the EU Which processing is relevant to the “checking” within the EU in the “behavior” of information topics as their actions takes https://bookmarkspedia.com/story3089294/cyber-security-consulting-in-usa