Can a company take legal action if the GDPR requestor is not a European citizen?
<p>I want to request the &quot;Right to be forgotten&quot; from a company that complies with the GDPR regulations. In the email, I have included the below:</p>
<blockquote>
<p>As laid down in Article 12(3) GDPR, you have to confirm the erasure to me without undue delay and in any event within one month of receipt of the request.
If you do not answer my request within the stated period, I am reserving the right to take legal action against you and to lodge a complaint with the responsible supervisory authority.</p>
</blockquote>
<p>I am not a EU citizen, nor do I reside in the EU, but I want to make the request. In case the company finds out that I am not a EU citizen nor a resident, can the company take legal action on me?</p>

<h2>No, but not for the reason you think</h2>
<p>For a controller resident in the EU or UK, GDPR applies irrespective of where the data subject is or their nationality.</p>
<p>However, the violation of the GDPR does not give a right to sue. If the controller does not comply, you can complain to the regulator in their country of residence and it’s up to the regulator to take action.</p>

criminal-law gdpr privacy european-union