The issue
GDPR can apply to non-EU businesses offering goods or services to people in the EU or monitoring their behaviour. Website accessibility alone does not settle the assessment.
What to prepare
Map data, purposes, suppliers and international transfers. Check lawful basis, notices, security and safeguards; consent is neither the only basis nor a universal fix. Also examine home-country rules.
Official and primary sources
General information, not advice on an individual case. Sources consulted on 22 October 2026: check updates before acting. The overall portal review is ongoing. This note does not certify a complete check of every page.
