That’s not what it means: A company in the US could aquire a US citizen as customer and consider itself safe. Now that customer moves to the EU - et voilá, the

That’s not what it means: A company in the US could aquire a US citizen as customer and consider itself safe. Now that customer moves to the EU - et voilá, the company is subject to the GDPR. There’s many other regulations that only apply to citizens and not based on location.