GDPR territorial scope

Find the border where
GDPR begins.

Your headquarters are only one part of the answer. Article 3 also looks at establishments, intentionally offered goods or services, and monitoring people in the EEA.

Scope finder

Build your scenario

Four facts create one precise, permanent URL you can bookmark or share.

What this answers

A scope screen.
Not a legal conclusion.

01

Establishment

Is the processing carried out in the context of an EEA establishment?

02

Offering

Is the organisation intentionally offering paid or free goods or services to people in the EEA?

03

Monitoring

Does the processing track or analyse behaviour that takes place in the EEA?

04

Operational step

If a trigger applies, map roles, representative duties, processing and the correct workflow.

Method note · July 2026

Built from GDPR Article 3, Article 27 and the EDPB’s final territorial-scope guidelines.

This finder gives general information, not legal advice. It deliberately uses conditional language where the answer depends on facts that a four-part URL cannot prove.