Third, a controller or processor not proven from the EU are going to be subject for the GDPR if it processes the private knowledge of information subjects while in the EU Which processing is relevant to the “checking” in the EU of the “actions” of information topics as their behavior https://cybersecuritycertificatesaudiarabia.blogspot.com/