In general, all companies throughout the world are subject to GDPR if they have employees or customers in Europe. More specifically, the regulation applies to companies that handle data belonging to consumers who are located within the EU.