It problems guidelines regarding how to interpret core concepts from the GDPR and can problem binding choices dealt with to the info security authorities on dispute in concrete cases with regards to cross-border processing. Your company is service service provider primarily based outdoors the EU. It offers services to shoppers https://www.nathanlabsadvisory.com/pci-3ds.html