Right, it's a universal regulation that applies to about 6% of the world population. But you make a good point, it is very hard to regulate this on a higher lev

Right, it's a universal regulation that applies to about 6% of the world population. But you make a good point, it is very hard to regulate this on a higher level. I'm just saying that the EU shouldn't expect every foreign company to accept and play by their rules, especially if it's only relevant to a fraction of their customers. What this may lead to is companies refusing to serve the EU and EU residents forced to resort to shady VPN companies to access their services - as they already do to circumvent copyright regulations - eventually resulting in less privacy and loss of VAT and other revenue for the EU. Again, I do not want to paint an overly bleak picture - and I do support regulations like this one - but my feeling is that, due to the lack of a universal solution, this GDPR won't have a better fate than the current copyright regulations: beneficial for some, but at the cost of more internet fragmentation and discrimination. It's almost like lawmakers consistently forget that the internet doesn't stop at borders.