UK law firm Ellisons explains the scenarios in which GDPR applies to businesses in the US and beyond the EU and the action needed to ensure compliance.