The RSI security web site breaks down the methods in a few depth, but the process in essence goes like this: Your organization is service service provider primarily based outside the EU. It provides services to shoppers exterior the EU. Its shoppers can use its services when they travel to https://www.nathanlabsadvisory.com/difc-data-protection-compliance.html