If you serve customers in the European Union, the EU GDPR applies to you, regardless of your jurisdiction. GDPR applies to organizations located within the EU as well as organizations located outside the EU that offer goods or services to, or monitor the behaviour of EU data subjects. It applies to all companies that process and hold the personal information of data subjects residing in the EU, regardless of the company's location.