An evaluation of the applicability of General Data Protection Regulation (GDPR) is a critical first step toward its compliance. This chapter provides a framework for the assessment of the applicability of GDPR for individual businesses and organizations. GDPR applies to all processing of personal data regarding the European Union (EU) and its citizens. GDPR also applies where processing may take place outside the EU, but a Member State's law would apply to that jurisdiction by an instrument of public international law. The “territorial” provisions of GDPR represent the "long arm" of the law, extending the effect of this regulation beyond the borders of the EU. Under GDPR, processing comprises any set of operations or treatments performed on personal data, regardless of whether it is carried out manually or with the help of automated mechanisms.