To be eligible for things like a GDPR Data deletion request etc, is it enough that I am a citizen or must I be a resident? ty :)
To be eligible for things like a GDPR Data deletion request etc, is it enough that I am a citizen or must I be a resident? ty :)
The GDPR is limited to the territory, not the inhabitants, none of the companies can operate in the EU if they don’t respect the privacy law. As said, if you are in the EU and connect to a server or page of one of the companies, these must use the GDPR rules if they operate in the EU. You can compare the behavior of these with a test with Blacklight. eg in the case of Microsoft US vs Microsoft EU
A law is always valid in a state or country and everybody, irrelevant if a tourist, citizen or company must respect it.