3rd, a controller or processor not founded in the EU will likely be subject matter on the GDPR if it procedures the personal knowledge of data subjects while in the EU Which processing is linked to the “monitoring” during the EU from the “conduct” of information topics as their actions https://getidealist.com/story19298841/cyber-security-consulting-in-saudi-arabia