I.e., complying to GDPR means you can’t comply to cybersecurity laws.
US has less of those.
I.e., complying to GDPR means you can’t comply to cybersecurity laws.
US has less of those.
For instance, one of GDPR's 6 lawful bases for processing data is in order to comply with legal obligations.
If you're going to make strong claims like that, the onus really is on you to give specific examples.
GDPR and cybersecurity laws are designed to be compatible, not mutually exclusive, but I'm sure there are edge-cases. Still, what exact situation did you find yourself in here in order to believe they're mutually exclusive?
Of course, as someone else mentioned, that is not an argument against EU sovereignty but rather one of its motors.
Usually they do. European company processing personal data of non-EU customers falls with article 3(1) "This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not."
Of course if they do not process any personal data then it wouldn't apply but that's pretty unlikely (and if that was the case the EU customers data wouldn't fall within GDPR either).