Use when designing or auditing a GDPR compliance program for an organization that processes personal data of EU/EEA residents Geographic scope: European Union.