The RSI Security web site breaks down the measures in certain detail, but the method in essence goes such as this: Your organization is service provider based exterior the EU. It provides services to shoppers outside the EU. Its clientele can use its services when they journey to other nations, https://www.nathanlabsadvisory.com/eu-gdpr.html