Besides the member states of the EU, the GDPR framework also applies to member states of the EFTA (European Free Trade Association): Iceland, Switzerland, Norway and Liechtenstein.