Nothing of that sorts, but: The GDPR applies only to non-EU organizations when they specifically target people in the EU, e.g. local currency payment, shipment

Nothing of that sorts, but: The GDPR applies only to non-EU organizations when they specifically target people in the EU, e.g. local currency payment, shipment to the EU, local support hotline. This usually requires contracting services from EU companies. And while the violating company can ignore the legislation, their service providers might be fully liable for any damage in the chain, caused by gross negligence.