Well - what does this mean for US citizens then? If those site violate GDPR laws, what exactly are they doing with user data, how are they securing it? Do they

Well - what does this mean for US citizens then? If those site violate GDPR laws, what exactly are they doing with user data, how are they securing it? Do they even know what's going on? Good litmus test for privacy/info sec readiness in corporations.