Yes, any company who is processing personal data of the EU citizens, must comply with the General Data Protection Regulation.
Your Essential Guide to Developing a Data Breach Response Plan
The General Data Protection Regulation (GDPR) places significant emphasis on securing personal data, particularly in Articles 32-34, which outline requirements for appropriate technical and organizational