You hear wildly different takes on this depending on the source. Troy hunt had a (now seemingly deleted) article where he claimed you have to be targeting EU us

You hear wildly different takes on this depending on the source. Troy hunt had a (now seemingly deleted) article where he claimed you have to be targeting EU users specifically, ie offering products in a european currency, EU domain, eu language (other than english). Dropping a IP block on the EU seems to be a pretty clear indication that you arent targeting EU users. EDIT: Found the article https://www.troyhunt.com/free-course-the-gdpr-attack-plan/ https://www.troyhunt.com/free-course-the-gdpr-attack-plan/