Romain Perray co-authored this bylined article, which provides key facts on the scope of the General Data Protection Regulation (GDPR). “The essential criterion for determining the geographical scope of the GDPR is the controller’s place of establishment,” Mr. Perray noted.