GDPR applies whenever personal data of individuals in the EU, UK, or EEA is processed — regardless of where the organization doing the processing is located.
Who GDPR applies to
- Any organization based in the EU/EEA/UK that processes personal data — whether or not the data subjects are in those regions.
- Any organization outside the EU/EEA/UK that offers goods or services to individuals in those regions, or that monitors their behavior.
Why non-EU companies still care
A U.S.-based management company or payroll provider that handles data of even one EU-resident crew member is subject to GDPR for that data. See US Companies and GDPR — Key Facts.
What "personal data" means
Any information relating to an identified or identifiable natural person. Names, email addresses, phone numbers, passport numbers, bank details, IP addresses, and photographs are all personal data under GDPR.
Was this article helpful?
Questions about this document?
Contact your MMV account manager or open a support ticket.