@BritishTechGuru @frankrausch

Not just citizens - actually it applies to the processing of personal data of all data subjects within the EU even if the processing is done outside of the EU. Article 3 sets the territorial scope, with recitals clarifying. gdpr-info.eu/art-3-gdpr/
@ptrc