Under the GDPR, individuals can request organizations to exercise rights around the use and collection of personal data and only applies to personal information captured or processed while a Data Subject is physically residing in the European Economic Area (EEA). For non-ECU requests only.