To me there's still a minuscule risk that goes something like: "Hey, we think your company is violating GDPR. Come to court." US company ignores. EU court finds

To me there's still a minuscule risk that goes something like: "Hey, we think your company is violating GDPR. Come to court." US company ignores. EU court finds in favor of whoever is launching these lawsuits. They can't collect any fines, but maybe they could prevent the company owners / other employees from entering the EU even as a tourist until they pay up. Though that goes against the whole philosophy of the LLC, EU perspectives on business generally seem kinda screwy... I agree unless you have business in EU it's not really worth worrying about it... And even with business in EU, depending on how much of a hassle it would be to overhaul everything, an underconsidered option in all the panicked headless running about is just to have code branches that don't collect any data if the context is EU. Overhaul only what's needed for business, but no need to run around fixing all the other data vacuuming / data laziness going on just yet.