International Business, 2e
Instructor Guide to Module 6
06–11
Copyright © 2020 by McGraw-Hill Education. All rights reserved. No reproduction or distribution without the prior written consent of McGraw-Hill
Education.
2018. It addresses how data on individuals can be obtained, stored, processed, or otherwise
used, and it requires safeguards to protect that data. Any company that does business in the
European Union, even if just a single online customer, must comply with this regulation.
1. What implications might the GDPR have even for small companies or nongovernmental
organizations such as charities or churches that have a limited online presence and that are
not based in the European Union?
The main idea to discuss is the cost of compliance for small companies and organizations
compared to the value of a presence in the European Union. What options do they have? They
2. Do you think that this extraterritorial application of EU laws to companies operating in
other nations should be allowed? Why or why not?
Some students may suggest that living in an online world means that there are no physical
boundaries so extraterritoriality is a natural thing. If this is proposed, ask where this will end.
Should every country be allowed to act extraterritorially? How do you comply with all of these
laws? What if the laws conflict (such as keeping data private versus giving a particular
government full access)?
If extraterritoriality is opposed, ask how to define a territory in an online world. Is it the county
where the firm is headquartered? Where the servers are? Where the customer is? What is to
stop a firm from moving headquarters to avoid onerous laws?
GLOBAL DEBATE: The WTO and U.S. Dolphin-Safe Tuna Labeling: A Threat to National
Sovereignty?