Under the Data Protection Directive of 1995 only applied to companies with legal establishment in an EU country or uses equipment located in the country to process the data. The GDPR expands the territorial reach to include controllers or processors outside of the EU for data processing activities relating to the offering of goods or services to individuals in the EU or to the monitoring of their behavior.<ref>[https://www.wileyrein.com/newsroom-newsletters-item-May_2017_PIF-The_GDPRs_Reach-Material_and_Territorial_Scope_Under_Articles_2_and_3.html The GDPR's Reach: Material and Territorial Scope Under Articles 2 and 3]</ref> EU guidance has made it clear that any website that offers goods or services to EU residents, or that routinely processes and/or stores data of website visitors is technically subject to GDPR enforcement.<ref name="gdproutsideEU">[https://gdpr.eu/companies-outside-of-europe/ GDPR.eu - Companies Outside of Europe]</ref> Two exceptions apply to this broad statement: | Under the Data Protection Directive of 1995 only applied to companies with legal establishment in an EU country or uses equipment located in the country to process the data. The GDPR expands the territorial reach to include controllers or processors outside of the EU for data processing activities relating to the offering of goods or services to individuals in the EU or to the monitoring of their behavior.<ref>[https://www.wileyrein.com/newsroom-newsletters-item-May_2017_PIF-The_GDPRs_Reach-Material_and_Territorial_Scope_Under_Articles_2_and_3.html The GDPR's Reach: Material and Territorial Scope Under Articles 2 and 3]</ref> EU guidance has made it clear that any website that offers goods or services to EU residents, or that routinely processes and/or stores data of website visitors is technically subject to GDPR enforcement.<ref name="gdproutsideEU">[https://gdpr.eu/companies-outside-of-europe/ GDPR.eu - Companies Outside of Europe]</ref> Two exceptions apply to this broad statement: |