I recently wanted to check the menu of one of the top 10 US restaurant/cafe chains (which only has locations within the US) while I was abroad and was surprised

I recently wanted to check the menu of one of the top 10 US restaurant/cafe chains (which only has locations within the US) while I was abroad and was surprised that they block all non-US traffic. I completely agree that "actual GDPR-compliance" is always superior, but some companies have spent months preparing for GDPR, involving their engineering and legal team. For some, outright avoiding the headache and potential financial fallout if they get something wrong can be the better option, even if it may mean losing a few potential customers.