NEWSLETTER-2017

323 PERSONAL DATA PROTECTION where Member State law applies by virtue of public interna- tional law. To summarize, the GDPR applies when (i) data controllers and processors are located in the EU, whether or not the processing takes place in the EU; (ii) data controllers and processors are located any- where in the world, for the processing of personal data of subject located within the EU for the activities of offering goods or services, or monitoring behavior taking place in the EU; (iii) a Member State national law is applicable to the case. Consequently, all providers of goods and services with a customer base in the EU or any website or mobile application that utilizes mechanisms of online behavioral advertising shall be subject to the GDPR. Conclusion The GDPR introduced many reforms to enhance and ensure the personal rights and freedoms of the data subjects within the EU by granting them further control over their personal data. When consid- ered with the extraterritoriality of the GDPR, this means that many companies all over the world which may fall within GDPR’s territorial scope, needs to become and stay compliant with the detailed regula- tions introduced by the GDPR.