The European Data Protection Board (EDSA, the former Article 29 Working Party) issued guidance in late September 2018 on the extraterritorial application of the GDPR but was not subsequently published. The paper was then available to the 4th plenary session was put on the agenda again on November 16. The EDSA has now, on November 20, 2018, announced, the paper had been cleaned up and would be published soon:
During the September plenary, the EDPB adopted new draft guidelines, which will help provide a common interpretation of the territorial scope of the GDPR and provide further clarification on the application of the GDPR in various situations, in particular where the data controller or processor is established outside of the EUincluding on the designation of a representative. As the standard final legal checks prior to publication revealed that some items required further discussion, the EDPB decided to discuss the guidelines once more during the November plenary. These issues have now been fully addressed and the guidelines shall be soon published for public consultation.