Article 3 - Territorial scope

Article 3 sets out the GDPR's territorial scope, applying to any processing of personal data in the Union regardless of where the controller or processor is established. It also reaches entities outside the EU when they offer goods or services to EU residents or monitor their behaviour within the Union, thereby extending the regulation's reach beyond its borders.