...but can it actually be enforced there? While the GDPR ’s territorial scope is ambitious, enforcing it against non-EU entities raises complex legal and practical challenges.