By replacing the Data Protection Directive, the GDPR has extended the privacy scope to cover data held when an organization or person is in the EU. The Regulation also applies on international data transfers, physical and digital, to organizations or companies seated in third countries which process EU citizen data. Data processors exist in all economic sectors including banks, payment institutions, hospitals, telecom operators, retailers, e-commerce providers, over the top p