> 1. A Data Subject under GDPR is anyone within the borders of the EU at the time of processing of their personal data. However, they can also be anyone and anywhere in the context of EU established Data Controllers an Data Processors.
It's not even resident, the bar is far lower. A US resident on holidays to europe is covered.
It's not even resident, the bar is far lower. A US resident on holidays to europe is covered.
See https://cybercounsel.co.uk/data-subjects/ (linked in a sibling comment)