3rd, a controller or processor not set up during the EU might be issue towards the GDPR if it procedures the non-public information of data topics from the EU Which processing is related to the “monitoring” while in the EU of the “conduct” of information topics as their actions requires https://topsocialplan.com/story3059207/cyber-security-services-in-saudi-arabia