What is &quot;a place where Member State law applies by virtue of public international law&quot;?
<p><a href="https://gdpr-info.eu/art-3-gdpr/" rel="nofollow noreferrer">Art. 3 (3) GDPR</a> mentions that:</p>

<blockquote>
  <ol start="3">
  <li>This Regulation applies to the processing of personal data by a controller not established in the Union, but in a place where Member State law applies by virtue of public international law.</li>
  </ol>
</blockquote>

<p>What are those places? </p>

<p>It means places that would fall under the EU laws and rules by treaties and things like that. For example, a consulate. </p>

<blockquote>
  <p>The GDPR also applies wherever EU Member State law applies by virtue of public international law. The Recitals provide a single example: a diplomatic mission or consular position. While that case is limited, the rule in public international law established by the Permanent Court of International Justice in Lotus is that a country has any extra-territorial jurisdiction it claims so long as there is not a public international law rule prohibiting the assumption of jurisdiction. Thus, the EU potentially could expand the GDPR scope in the future using this provision. <a href="https://www.wileyrein.com/newsroom-newsletters-item-May_2017_PIF-The_GDPRs_Reach-Material_and_Territorial_Scope_Under_Articles_2_and_3.html" rel="noreferrer">https://www.wileyrein.com/newsroom-newsletters-item-May_2017_PIF-The_GDPRs_Reach-Material_and_Territorial_Scope_Under_Articles_2_and_3.html</a></p>
</blockquote>

gdpr european-union