IANAL and none of what I say constitutes as legal advice. That said, all laws are limited to the nation-state they're enacted in. You can walk into a brother in

IANAL and none of what I say constitutes as legal advice. That said, all laws are limited to the nation-state they're enacted in. You can walk into a brother in the EU, but not in the US unless you're in Nevada where state-law allows it. Most legislation in my country (Pakistan) define their scope in their text ("Whole of Pakistan", or "Whole of Punjab", etc.) depending on the body enacting the legislation. The GDPR is special, in that it expands the scope to online services that target EU residents. If your audience includes the EU, and you're not GDPR compliant, you'll likely get fined by the EU. How they enforce the fine is murky at the moment, and was left out as to be decided later, but I'd assume you'd have to pay the fine and any other fees if you ever started operating within the EU or running money through, or literally doing anything in the EU. This random stackexchange question[1] also says the EU hopes to have US cooperation to enforce the fines but IANAL and I'm not sure how that would work. [1]: https://politics.stackexchange.com/questions/30509/how-are-gdpr-fines-actually-enforced-for-us-companies-with-no-physical-presence https://politics.stackexchange.com/questions/30509/how-are-g...