Many misunderstandings prevail about GDPR. Legal departments should focus on Article 3, which states that any business that targets EU consumers is subject to the law. However, drilling down, the law applies in some instances and not in others. Here is an overview.