‘FOCUS: If a business wants to process data that relates to a person located in the EU, it must comply with EU privacy laws. By far one of the easiest ways to lawfully process personal data is by obtaining consent from the person whose data a business would like to process.’
OUT-LAW.com, 3rd February 2015
Source: www.out-law.com