international european-union gdpr jurisdiction multiple-jurisdiction
In which jurisdictions outside the EU can the GDPR be enforced?
<p>The GDPR is a law the EU passed requiring businesses, even foreign businesses, to protect the privacy of EU citizens.</p>

<p>Now of course, the EU's jurisdiction is not global, but the EU <em>does</em> have treaties with other countries they may permit it to enforce the GDPR in those countries or requires those countries to enforce it on the EU's behalf. For example, <a href="https://law.stackexchange.com/a/28681/3207">this answer</a> implies the U.S. is one of those countries.</p>

<p>In which jurisdictions outside the EU can the GDPR be enforced?</p>

<p>Note that I am assuming that the whoever is violating the GDPR does not live nor has any assets in the EU that the EU could seize.</p>

<p>The GDPR applies to <a href="https://gdpr-info.eu/art-3-gdpr/" rel="nofollow noreferrer">anyone anywhere</a> who is collecting data on people in the EU, including visitors.</p>

<p>As far as enforcement goes, it would depend on the circumstances. Ultimately the directors of whatever company was involved could be extradited, or if they ever visited the EU they could be arrested.</p>
