The GDPR states that entities that process or store personal data relating to people living within the EU need to follow the rules laid down in the regulation. This means that the GDPR affects Canadian organizations that:
Have offices and employees in the EU;
Offer goods and services to individuals in the EU through their website or app;
Use cookies to collect the IP address or other personal information from EU citizens;
Process the personal data of EU individuals.
Find out more about GDPR compliance.