{"id":5480,"date":"2022-02-02T12:16:19","date_gmt":"2022-02-02T11:16:19","guid":{"rendered":"https:\/\/s8.tgin.eu\/?p=5480"},"modified":"2024-02-22T17:06:33","modified_gmt":"2024-02-22T16:06:33","slug":"gdpr-and-hr-data-for-non-eu-companies","status":"publish","type":"post","link":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/","title":{"rendered":"GDPR and HR data for non EU-companies"},"content":{"rendered":"\n

It\u2019s been three years since the GDPR entered into force and although it provided clarity in regards to handling personal data, some ambiguities still remain. In particular when it concerns employing EU employees as a non-EU organization.<\/p>\n\n\n\n

Territorial applicability<\/h3>\n\n\n\n

The territorial applicability of the GDPR is outlined in Article 3 and is conditional on three criteria:<\/p>\n\n\n\n

    \n
  1. the location of the controller\/processor<\/li>\n\n\n\n
  2. the offering of services to individuals in the EU\/EEA (through targeting them)<\/li>\n\n\n\n
  3. the monitoring of the behavior of data subjects in the EU.<\/li>\n<\/ol>\n\n\n\n

    Human Resources (HR) data also includes personal data (i.e name, email address, physical address, bank account, \u2026) and hence the processing of these data falls under the scope of the GDPR. <\/p>\n\n\n\n

    According to GDPR Art. 3.1<\/strong><\/h3>\n\n\n\n

    This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not.<\/em><\/p>\n\n\n\n

    When a company is located in the EU\/EEA and its employees or contractors are also located in the EU\/EEA, Art.3.1 of the GDPR applies. Therefore, any handling of employees personal data should be performed in a GDPR compliant manner. This can range from setting the legal bases for the processing to adhering to the data protection principles (GDPR Art. 5) and ensuring the exerceseability of the employees rights (Articles 15-21 GDPR). <\/p>\n\n\n

    \n
    \"\"<\/figure>\n<\/div>\n\n\n

    <\/p>\n\n\n\n

    The situation becomes less clear when the company is located outside of the EU\/EEA but has employees located in the EU\/EEA. GDPR Art. 3.2 regulates the extraterritorial effect of the GDPR and foresees that when a company is not established in the EU, it will fall under the GDPR only<\/strong> if:<\/p>\n\n\n\n

      \n
    1. it offers services to data subjects based in the EU\/EEA (through targeting them and not incidentally)<\/li>\n\n\n\n
    2. it monitors EU-based data subjects behavior.<\/li>\n<\/ol>\n\n\n\n

      The EDPB<\/a> has stressed in its 03\/2018 Guidelines<\/a> on the territorial scope of the GDPR that employment doesn\u2019t constitute an offering of service<\/em>. Indicatively, one can read from its example of a US company processing personal data of its employees while they were on a trip in the EU for human resources purposes:<\/p>\n\n\n\n

      \u201cIn this situation, while the processing activity is specifically connected to persons on the territory of the Union (i.e. employees who are temporarily in France, Belgium and the Netherlands) it does not relate to an offer of a service to those individuals, but rather is part of the processing necessary for the employer to fulfil its contractual obligation and human resources duties related to the individual\u2019s employment. The processing activity does not relate to an offer of service and is therefore not subject to the provision of the GDPR as per Article 3(2)a<\/em>.\u201d<\/p>\n\n\n\n

      It is possible however that an employer monitors its employees. This could include, among others, <\/p>\n\n\n\n

        \n
      1. Application usage monitoring, <\/li>\n\n\n\n
      2. CCTV monitoring, <\/li>\n\n\n\n
      3. email monitoring and, <\/li>\n\n\n\n
      4. geolocation through company-issued equipment. <\/li>\n<\/ol>\n\n\n\n

        In this case, any personal data of employees located in the EU, collected through this monitoring activity, will fall under the GDPR even if the employer (controller) is located outside of the EU\/EEA and has no subsidiary in the EU\/EEA, under the GDPR Art. 3.2. <\/p>\n\n\n\n

        Concluding applicability of the GDPR for HR data for non EU companies<\/h3>\n\n\n\n

        We can therefore conclude that if the company doesn\u2019t monitor its employees based in the EU\/EEA, then any processing of their personal data for HR related purposes (issuing of payroll, insurance, drafting of their employment contracts) will not fall under the scope of the GDPR. This seems also to be in line with the EDPB 3\/2018 Guidelines on the extraterritorial effect of the GDPR.<\/p>\n\n\n\n

        If the company is located outside the EU\/EEA and has no EU\/EEA based employees or contractors then any employee personal data processing even through monitoring would fall outside the scope of the GDPR.<\/p>\n","protected":false},"excerpt":{"rendered":"

        It\u2019s been three years since the GDPR entered into force and although it provided clarity in regards to handling personal data, some ambiguities still remain. In particular when it concerns employing EU employees as a non-EU organization. Territorial applicability The territorial applicability of the GDPR is outlined in Article 3 and is conditional on three […]<\/p>\n","protected":false},"author":20,"featured_media":5482,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[10,88,163],"tags":[165,166,164],"class_list":["post-5480","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-beyond-eu","category-gdpr","category-hr","tag-employment-data","tag-gdpr-applicability","tag-human-resources"],"acf":[],"featured_image_urls":{"full":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg",1920,1280,false],"thumbnail":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-150x150.jpg",150,150,true],"medium":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-300x200.jpg",300,200,true],"medium_large":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-768x512.jpg",640,427,true],"large":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-1024x683.jpg",640,427,true],"1536x1536":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-1536x1024.jpg",1536,1024,true],"2048x2048":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg",1920,1280,false],"image-200-200":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-200x200.jpg",200,200,true]},"post_excerpt_stackable":"

        It\u2019s been three years since the GDPR entered into force and although it provided clarity in regards to handling personal data, some ambiguities still remain. In particular when it concerns employing EU employees as a non-EU organization. Territorial applicability The territorial applicability of the GDPR is outlined in Article 3 and is conditional on three criteria: the location of the controller\/processor the offering of services to individuals in the EU\/EEA (through targeting them) the monitoring of the behavior of data subjects in the EU. Human Resources (HR) data also includes personal data (i.e name, email address, physical address, bank account,…<\/p>\n","category_list":"Beyond EU<\/a>, GDPR<\/a>, HR<\/a>","author_info":{"name":"Athina Sotiriou","url":"https:\/\/techgdpr.com\/blog\/author\/athina\/"},"comments_num":"0 comments","featured_image_urls_v2":{"full":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg",1920,1280,false],"thumbnail":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-150x150.jpg",150,150,true],"medium":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-300x200.jpg",300,200,true],"medium_large":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-768x512.jpg",640,427,true],"large":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-1024x683.jpg",640,427,true],"1536x1536":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-1536x1024.jpg",1536,1024,true],"2048x2048":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg",1920,1280,false],"image-200-200":["https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055-200x200.jpg",200,200,true]},"post_excerpt_stackable_v2":"

        It\u2019s been three years since the GDPR entered into force and although it provided clarity in regards to handling personal data, some ambiguities still remain. In particular when it concerns employing EU employees as a non-EU organization. Territorial applicability The territorial applicability of the GDPR is outlined in Article 3 and is conditional on three criteria: the location of the controller\/processor the offering of services to individuals in the EU\/EEA (through targeting them) the monitoring of the behavior of data subjects in the EU. Human Resources (HR) data also includes personal data (i.e name, email address, physical address, bank account,…<\/p>\n","category_list_v2":"Beyond EU<\/a>, GDPR<\/a>, HR<\/a>","author_info_v2":{"name":"Athina Sotiriou","url":"https:\/\/techgdpr.com\/blog\/author\/athina\/"},"comments_num_v2":"0 comments","yoast_head":"\nGDPR and HR data for non EU-companies - TechGDPR<\/title>\n<meta name=\"description\" content=\"Ambiguities on the applicability of the GDPR remains. In particular when it concerns employing EU employees as a non-EU organization.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR and HR data for non EU-companies - TechGDPR\" \/>\n<meta property=\"og:description\" content=\"Ambiguities on the applicability of the GDPR remains. In particular when it concerns employing EU employees as a non-EU organization.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/\" \/>\n<meta property=\"og:site_name\" content=\"TechGDPR\" \/>\n<meta property=\"article:published_time\" content=\"2022-02-02T11:16:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-22T16:06:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Athina Sotiriou\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@techgdpr\" \/>\n<meta name=\"twitter:site\" content=\"@techgdpr\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Athina Sotiriou\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/\"},\"author\":{\"name\":\"Athina Sotiriou\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#\\\/schema\\\/person\\\/2ca8f34b138f5fb73737abdd3f108d0c\"},\"headline\":\"GDPR and HR data for non EU-companies\",\"datePublished\":\"2022-02-02T11:16:19+00:00\",\"dateModified\":\"2024-02-22T16:06:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/\"},\"wordCount\":655,\"publisher\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/pexels-arthouse-studio-4330055.jpg\",\"keywords\":[\"employment data\",\"GDPR applicability\",\"Human resources\"],\"articleSection\":[\"Beyond EU\",\"GDPR\",\"HR\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/\",\"url\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/\",\"name\":\"GDPR and HR data for non EU-companies - TechGDPR\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/pexels-arthouse-studio-4330055.jpg\",\"datePublished\":\"2022-02-02T11:16:19+00:00\",\"dateModified\":\"2024-02-22T16:06:33+00:00\",\"description\":\"Ambiguities on the applicability of the GDPR remains. In particular when it concerns employing EU employees as a non-EU organization.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/pexels-arthouse-studio-4330055.jpg\",\"contentUrl\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2022\\\/02\\\/pexels-arthouse-studio-4330055.jpg\",\"width\":1920,\"height\":1280},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/gdpr-and-hr-data-for-non-eu-companies\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/techgdpr.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR and HR data for non EU-companies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#website\",\"url\":\"https:\\\/\\\/techgdpr.com\\\/\",\"name\":\"TechGDPR\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techgdpr.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#organization\",\"name\":\"TechGDPR\",\"url\":\"https:\\\/\\\/techgdpr.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/staging.techgdpr.com\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/TGDPR_logo_500px.png\",\"contentUrl\":\"https:\\\/\\\/staging.techgdpr.com\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/TGDPR_logo_500px.png\",\"width\":501,\"height\":334,\"caption\":\"TechGDPR\"},\"image\":{\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/techgdpr\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/techgdpr\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/#\\\/schema\\\/person\\\/2ca8f34b138f5fb73737abdd3f108d0c\",\"name\":\"Athina Sotiriou\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/sotiriou_athina-150x150.png\",\"url\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/sotiriou_athina-150x150.png\",\"contentUrl\":\"https:\\\/\\\/techgdpr.com\\\/wp-content\\\/uploads\\\/2021\\\/10\\\/sotiriou_athina-150x150.png\",\"caption\":\"Athina Sotiriou\"},\"description\":\"Athina Sotiriou graduated from Tilburg University in the Netherlands with a Master's Degree (LLM) in Technology Law. She joined TechGDPR as a data protection trainee.\",\"url\":\"https:\\\/\\\/techgdpr.com\\\/blog\\\/author\\\/athina\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GDPR and HR data for non EU-companies - TechGDPR","description":"Ambiguities on the applicability of the GDPR remains. In particular when it concerns employing EU employees as a non-EU organization.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/","og_locale":"en_US","og_type":"article","og_title":"GDPR and HR data for non EU-companies - TechGDPR","og_description":"Ambiguities on the applicability of the GDPR remains. In particular when it concerns employing EU employees as a non-EU organization.","og_url":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/","og_site_name":"TechGDPR","article_published_time":"2022-02-02T11:16:19+00:00","article_modified_time":"2024-02-22T16:06:33+00:00","og_image":[{"width":1920,"height":1280,"url":"https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg","type":"image\/jpeg"}],"author":"Athina Sotiriou","twitter_card":"summary_large_image","twitter_creator":"@techgdpr","twitter_site":"@techgdpr","twitter_misc":{"Written by":"Athina Sotiriou","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#article","isPartOf":{"@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/"},"author":{"name":"Athina Sotiriou","@id":"https:\/\/techgdpr.com\/#\/schema\/person\/2ca8f34b138f5fb73737abdd3f108d0c"},"headline":"GDPR and HR data for non EU-companies","datePublished":"2022-02-02T11:16:19+00:00","dateModified":"2024-02-22T16:06:33+00:00","mainEntityOfPage":{"@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/"},"wordCount":655,"publisher":{"@id":"https:\/\/techgdpr.com\/#organization"},"image":{"@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg","keywords":["employment data","GDPR applicability","Human resources"],"articleSection":["Beyond EU","GDPR","HR"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/","url":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/","name":"GDPR and HR data for non EU-companies - TechGDPR","isPartOf":{"@id":"https:\/\/techgdpr.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#primaryimage"},"image":{"@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#primaryimage"},"thumbnailUrl":"https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg","datePublished":"2022-02-02T11:16:19+00:00","dateModified":"2024-02-22T16:06:33+00:00","description":"Ambiguities on the applicability of the GDPR remains. In particular when it concerns employing EU employees as a non-EU organization.","breadcrumb":{"@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#primaryimage","url":"https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg","contentUrl":"https:\/\/techgdpr.com\/wp-content\/uploads\/2022\/02\/pexels-arthouse-studio-4330055.jpg","width":1920,"height":1280},{"@type":"BreadcrumbList","@id":"https:\/\/techgdpr.com\/blog\/gdpr-and-hr-data-for-non-eu-companies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/techgdpr.com\/"},{"@type":"ListItem","position":2,"name":"GDPR and HR data for non EU-companies"}]},{"@type":"WebSite","@id":"https:\/\/techgdpr.com\/#website","url":"https:\/\/techgdpr.com\/","name":"TechGDPR","description":"","publisher":{"@id":"https:\/\/techgdpr.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techgdpr.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/techgdpr.com\/#organization","name":"TechGDPR","url":"https:\/\/techgdpr.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/techgdpr.com\/#\/schema\/logo\/image\/","url":"https:\/\/staging.techgdpr.com\/wp-content\/uploads\/2018\/04\/TGDPR_logo_500px.png","contentUrl":"https:\/\/staging.techgdpr.com\/wp-content\/uploads\/2018\/04\/TGDPR_logo_500px.png","width":501,"height":334,"caption":"TechGDPR"},"image":{"@id":"https:\/\/techgdpr.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/techgdpr","https:\/\/www.linkedin.com\/company\/techgdpr"]},{"@type":"Person","@id":"https:\/\/techgdpr.com\/#\/schema\/person\/2ca8f34b138f5fb73737abdd3f108d0c","name":"Athina Sotiriou","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/techgdpr.com\/wp-content\/uploads\/2021\/10\/sotiriou_athina-150x150.png","url":"https:\/\/techgdpr.com\/wp-content\/uploads\/2021\/10\/sotiriou_athina-150x150.png","contentUrl":"https:\/\/techgdpr.com\/wp-content\/uploads\/2021\/10\/sotiriou_athina-150x150.png","caption":"Athina Sotiriou"},"description":"Athina Sotiriou graduated from Tilburg University in the Netherlands with a Master's Degree (LLM) in Technology Law. She joined TechGDPR as a data protection trainee.","url":"https:\/\/techgdpr.com\/blog\/author\/athina\/"}]}},"_links":{"self":[{"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/posts\/5480","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/comments?post=5480"}],"version-history":[{"count":3,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/posts\/5480\/revisions"}],"predecessor-version":[{"id":8116,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/posts\/5480\/revisions\/8116"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/media\/5482"}],"wp:attachment":[{"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/media?parent=5480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/categories?post=5480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techgdpr.com\/wp-json\/wp\/v2\/tags?post=5480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}