Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?

Which of the following would MOST likely trigger the extraterritorial effect of the GDPR, as specified by Article 3?
A . The behavior of suspected terrorists being monitored by EU law enforcement bodies.
B . Personal data of EU citizens being processed by a controller or processor based outside the E
D . The behavior of EU citizens outside the EU being monitored by non-EU law enforcement bodies.
E . Personal data of EU residents being processed by a non-EU business that targets EU customers.

Answer: D

Explanation:

Reference: https://hsfnotes.com/data/2019/12/02/edpb-adopts-final-guidelines-on-gdpr-extra-territoriality/