It difficulties guidelines regarding how to interpret core principles of the GDPR and will concern binding conclusions resolved to the info protection authorities on dispute in concrete scenarios with regards to cross-border processing. Your business is service supplier based exterior the EU. It provides services to shoppers exterior the EU. https://www.nathanlabsadvisory.com/blog/nathan/get-certified-cybersecurity-consulting-in-saudi-arabia/