Additional Information
Companies and employees based in the U.S. should be concerned about GDPR because it affects any organization (regardless of location) that collects or processes personal data of people in the EU. That means U.S. companies, even small ones, can be held accountable under GDPR. Accountability under the GDPR for U.S. companies include:
- Have EU customers, users, or employees
- Offer goods or services in the EU (even online)
- Monitor behavior of individuals in the EU (e.g., through cookies or analytics)