2 ms·

This is simply not true. GDPR applies to businesses targeting people located in the EU. Citizenship does not matter.