Part 7: Supplementary and final provision Section 207: Territorial application of this Act
This section provides details of the territorial application of the Act. Its application to data controllers and data processors depends on the place of establishment and the context of the activities of the establishment in which the personal data is processed.
	Subsection (2) provides that the Act applies to processing in the context of the activities of an establishment of a controller or processor in the UK. This is similar to Article 3(1) of the GDPR. It applies to all regimes under the Act.
	Subsection (3) provides that, in certain circumstances, the Act also applies to processing to which the GDPR applies which is carried out in the context of activities of an establishment of a controller or processor in a country or territory that is not part of the EU. This is similar to Article 3(2) of the GDPR. Subsection (3) does not apply for the applied GDPR or for Parts 3 or 4 of the Act.
	This section also defines a "person who has an establishment in the United Kingdom". This includes an individual who is ordinarily resident in the UK, a body incorporated under UK law, a partnership or other unincorporated association formed under UK law, or a person who maintains in the UK an office, branch or agency through which they carry out an activities or other stable arrangements.