3rd, a controller or processor not established from the EU will likely be issue for the GDPR if it procedures the personal facts of knowledge topics while in the EU Which processing is associated with the “monitoring” while in the EU on the “actions” of data subjects as their conduct https://socialwebnotes.com/story3114197/cyber-security-services-in-usa