The EU’s General Data Protection Regulation (GDPR) can apply to businesses outside Europe. It applies if you sell to people in the EU or track their behaviour online.
This is general information, not legal advice. Consult a professional if you target EU customers.
When it may apply
- You sell or ship to customers in EU countries.
- Your website targets EU visitors (EU currencies, languages, shipping).
- You track EU visitors’ behaviour for marketing.
Basic steps
- A clear privacy policy explaining data use; start with our privacy policy generator.
- Cookie consent before non-essential tracking; create a banner with our cookie banner generator.
- A lawful basis for processing, such as consent or contract.
- Respect rights to access, correct and delete data.
- Secure data and agreements with service providers.
India’s own law
India’s DPDP Act has its own requirements. Read the DPDP Act and website forms.
Read selling internationally.
Want the full picture? This article is part of Business websites: the complete guide, our in-depth guide with everything in one place.
