Maybe third time will be the charm. Most respondents here (including me) would like GDPR applied to all companies as it protects end users. However, US compani

Maybe third time will be the charm. Most respondents here (including me) would like GDPR applied to all companies as it protects end users. However, US companies with no legal/corporate presence in the EU are ONLY bound by US law. Take the case of EFF vs Australian patent troll [1]. Though EFF was sued in Australian court under Australian law, it didn't matter because EFF was an American company. This holds true, otherwise China could sue US media under Chinese law on the pretext of said media being available within China via the Internet. Similarly, for the EU to go after non EU corporate/legal entities, it'll need to implement a GDPR firewall, much like China's great firewall. It simply cannot push the onus of GDPR compliance on non EU entities with laws that it can't apply on them [1]: https://www.eff.org/deeplinks/2017/11/court-rules-effs-stupid-patent-month-post-protected-speech https://www.eff.org/deeplinks/2017/11/court-rules-effs-stupi...