Attached, the European Data Protection Board (formerly Article 29 Working Party) has issued guidelines addressing extraterritoriality of the GDPR.

Grist for the mill .....and very useful as we ponder the responsibilities of the data controller in the ICANN context.

The language is accessible and does'nt require rocket science knowledge or a law firm to tell us what makes sense!

-Carlton