It troubles guidelines on how to interpret Main principles with the GDPR and may difficulty binding selections tackled to the info protection authorities on dispute in concrete situations regarding cross-border processing. Your organization is service provider dependent outside the EU. It provides services to clients outside the EU. Its consumers https://www.nathanlabsadvisory.com/pci-dss-training.html