Controller outside the scope of GDPR regulation

Definitions

Regulation name
Demonstrating the existence of appropriate safeguards provided by controllers or processors