Territorial scope
CIPP/E glossary · Last reviewed: · By Victor Humenhuk (CIPP/E certified)
Territorial scope - The Article 3 rules deciding which organisations are bound by the GDPR, based on EU establishment or on targeting/monitoring people in the EU.
In the CIPP/E body of knowledge, Territorial scope comes up under Ch 5.1 - Introduction.
Territorial scope in context
- Personal data protects ==natural persons== (living humans) universally, regardless of nationality or residence (subject to Article 3 territorial scope). (Natural Person, Deceased Persons and PII)
- Chapter 5 sets out two filters that decide whether the [[GDPR]] applies at all: [[territorial scope]] (which organisations, by location or by who they target) and [[material scope]] (which kinds of processing). (Introduction and overview of scope)
- The Feb 2022 Council position proposed: territorial scope based on ==users located in the EU== (covering even non-personal data), consent aligned to the GDPR (and ==extended to legal persons==), and a statutory ==soft opt-in== for marketing tied to a purchase. (The ePrivacy Regulation (proposal))
Where Territorial scope is covered in the CIPP/E study notes
Related terms
- GDPR
- Material scope
- Regulation 2018/1725
Test yourself on Territorial scope
Recognising a definition is not the same as applying it in an exam scenario. Work through the free CIPP/E practice questions, or read the full CIPP/E study guide - every study note is free.