According to the European Data Protection Board, if a controller that is not established in the EU but still subject to the GDPR becomes aware of a personal dat...