{"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/3","url":"https://www.headlesslaw.com/gdpr/articles/3","title":"Article 3 — Territorial scope","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"fb75f195f719d7a0","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/3/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/3/versions/2016-05-04/rev/fb75f195f719d7a0","versions_url":"https://www.headlesslaw.com/gdpr/articles/3/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/3/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/articles/3.md","body_sha256":"56a090bb3bb8f2dbe3285472ca5cec6bc0294e497ef0eff6df52cf3a3a938ee8"},"units":[{"locator":"gdpr/art/3","kind":"article","status":"in_force","label":null,"heading":"Territorial scope","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"gdpr/art/3/para/1","kind":"paragraph","status":"in_force","label":"1.","heading":null,"text":"This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not.","marks":[],"revision":1,"text_hash":"2b6fe60841f9b9c5489cf1cbeb5deadaa9f0baaeeed8920865f0343c129e0ea6","reason":null},{"locator":"gdpr/art/3/para/2","kind":"paragraph","status":"in_force","label":"2.","heading":null,"text":"This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to:","marks":[],"revision":1,"text_hash":"c4e338e9f1a40759256f19130dafd607110e6d0e9599ee61fea73a98723ceede","reason":null},{"locator":"gdpr/art/3/para/2/pt/a","kind":"point","status":"in_force","label":"(a)","heading":null,"text":"the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or","marks":[],"revision":1,"text_hash":"9da16cad4c1283a28b2d461a41fb718796dcc78026c61066bcfdd75e9111fc66","reason":null},{"locator":"gdpr/art/3/para/2/pt/b","kind":"point","status":"in_force","label":"(b)","heading":null,"text":"the monitoring of their behaviour as far as their behaviour takes place within the Union.","marks":[],"revision":1,"text_hash":"d264f5144420b94fd5c6fecac39118e9eaf68b48f0574b373eff6012ba6e0205","reason":null},{"locator":"gdpr/art/3/para/3","kind":"paragraph","status":"in_force","label":"3.","heading":null,"text":"This Regulation applies to the processing of personal data by a controller not established in the Union, but in a place where Member State law applies by virtue of public international law.","marks":[],"revision":1,"text_hash":"8f3213cc69faf303974a09d2ef34c2f2683e9a919d9c0e67662868d02d4549f1","reason":null}],"markdown":"---\ntitle: \"Article 3 — Territorial scope\"\ntype: regulation\nlegal_status: in_force\nsource: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\nsource_retrieved: 2026-09-28\nshortTitle: \"Article 3 — Territorial scope\"\ninstrument_type: level1_regulation\nauthority: Commission\nbinding: true\nbinding_character: binding\nmica_level2: false\nlegal_basis: \"Regulation (EU) 2016/679\"\ninstrument: gdpr\ncelex: \"32016R0679\"\nregulation: GDPR\nregulation-full: \"Regulation (EU) 2016/679\"\narticle: 3\nstatus: in_force\nobject_id: eu.gdpr.legal_text.article.3\ntext_version: \"Consolidated version of 4 May 2016\"\nsource_url: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\n---\n\n*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*\n\n1. <a id=\"p-1\"></a>This Regulation applies to the [processing](https://www.headlesslaw.com/definitions/gdpr/processing) of [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) in the context of the activities of an establishment of a [controller](https://www.headlesslaw.com/definitions/gdpr/controller) or a [processor](https://www.headlesslaw.com/definitions/gdpr/processor) in the Union, regardless of whether the processing takes place in the Union or not.\n2. <a id=\"p-2\"></a>This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to:\n\n    <a id=\"p-2-a\"></a>**(a)** the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or\n\n    <a id=\"p-2-b\"></a>**(b)** the monitoring of their behaviour as far as their behaviour takes place within the Union.\n3. <a id=\"p-3\"></a>This Regulation applies to the processing of personal data by a controller not established in the Union, but in a place where Member State law applies by virtue of public international law.\n\n## Related Level 2 and Level 3\n\n### Guidance and Q&A\n\n- [EDPB 3/2018 — Guideline — Territorial scope of the GDPR \\[final\\]](../level-3/guidelines/edpb-03-2018-territorial-scope.md)\n- [EDPB 05/2021 — Guideline — Interplay of Article 3 and Chapter V \\[final\\]](../level-3/guidelines/edpb-05-2021-article-3-chapter-v-interplay.md)\n\n***\n\n[Chapter I — General provisions](../chapters/i.md) · [← Article 2](2.md) · [Article 4 →](4.md)\n"}