Yes, GDPR applies to ecommerce businesses that serve EU customers. The data collected to process orders from EU citizens contains elements that fall under the guidelines defined by the GDPR. Companies need to make sure they understand their responsibilities regarding GDPR before conducting business in the EU.