Some might find the topic concerning who is affected by GDPR, the EU's data privacy law, and where they are affected confusing, but here is how it works. If a user is in Europe and connects to a website or service outside Europe, that service has to provide the same privileges (information protection) and security as if operating from Europe, and therefore must comply with the new regulations that impose GDPR. Another example is the case of any non-European citizen, who is in EU territory and who connects to a website that he or she usually use when they are outside Europe. In this case, the site must comply with the new legislation, since GDPR applies to everyone who is in the EU at that time – not just its citizens. Therefore, if a company provides services in the EU or if its site has users from the EU, whether visitors to the EU or EU citizens, it is important that the company make sure it complies with GDPR.