Extraterritorial Application
What is Extraterritorial Application?
The application of privacy laws beyond a country's borders to foreign organizations that process the personal data of that country's residents.
Terms that appear alongside extraterritorial application
Each of these is named in at least one of the same controls as extraterritorial application. The number is how many controls name both.
- data protection 13 shared controls
- gdpr 13 shared controls
- data subject 9 shared controls
- consent 8 shared controls
- compliance 5 shared controls
- lawful basis 5 shared controls
- data controller 4 shared controls
- sensitive personal data 4 shared controls
Frameworks that govern extraterritorial application
What the standards actually require on extraterritorial application
Requirements naming extraterritorial application across 6 standards, quoted from the control text.
The DSL governs data processing activities and their security within the PRC, and applies extraterritorially to data activities outside the PRC that harm national security, the public interest, or the rights of PRC citizens/organisations.
DSL-Art2 · Scope and Extraterritorial Application (Art. 2) →Applies to processing of personal information of natural persons within China, and to processing outside China that aims to provide products/services to individuals in China or to analyse/evaluate their conduct.
PIPL-Art3 · Scope and Extraterritorial Application →Digital Personal Data Protection Act 2023 (DPDP Act) Act No. 22 of 2023 was passed by the Indian Parliament + received the assent of President Droupadi Murmu on 11 August 2023 + published in the Gazette of India Extraordinary Part II Section 1 on 12 August 202...
DPDP-Scope-1to3-Definitions-IndiaParliament-11August2023-Rules2025-MeitY-Puttaswamy-IT-Act-43A-Repeal · DPDP Act Scope + Sections 1-3 + Definitions + Indian Parliament 11 August 2023 + DPDP Rules 2025 + MeitY Governance + Justice K.S. Puttaswamy + Repeal of IT Act 43A + Extraterritorial Application →Indonesia Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi, UU PDP) signed into law by President Joko Widodo on 17 October 2022 + published in the State Gazette of Indonesia + becoming Indonesia first comprehensive...
IDPdp-Scope-UU27-2022-Joko-Widodo-17Oct2022-Effective-17Oct2024-MoCom-DPA-Extraterritorial · Indonesia PDP Law Scope + UU No. 27 of 2022 (UU PDP) + President Joko Widodo 17 October 2022 + 2-Year Transition + Effective 17 October 2024 + MoCom DPA + Extraterritorial Application + 76 Articles + 16 Chapters →The Jamaica Data Protection Act 2020 (Act No. 7 of 2020) is Jamaica's first comprehensive data protection legislation passed by the Jamaican Parliament 16 June 2020 + assented to by the Governor-General 30 June 2020 + published in the Gazette 1 July 2020.
JM-DPA2020-Scope-Application-Sec1-3-31Dec2021-PartialEffective-1Dec2023-MandatoryCompliance-Territorial-Extraterritorial · Jamaica Data Protection Act 2020 - Scope + Application + Sections 1-3 + Commencement 1 December 2021 Partial + 1 December 2023 Mandatory Compliance + Territorial + Extraterritorial Application + Definitions →PDPA applies to controllers and processors outside Thailand if they offer goods or services to, or monitor behaviour of, data subjects in Thailand.
Section 5 · Extraterritorial Application →Questions people ask about extraterritorial application
What is Extraterritorial Application?
Why is Extraterritorial Application important for compliance?
Which compliance frameworks address Extraterritorial Application?
Where can I learn more about Extraterritorial Application?
See how Extraterritorial Application applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.