A. The behavior of EU citizens outside the EU being monitored by non-EU law enforcement bodies.

B. Personal data of EU residents being processed by a non-EU business that targets EU customers.

C. The behavior of suspected terrorists being monitored by EU law enforcement bodies.

D. Personal data of EU citizens being processed by a controller or processor based outside the EU.