> something centered around “if you generate profits in the USA, and hold the data of Americans, these requirements exist for your system” makes sense This is

> something centered around “if you generate profits in the USA, and hold the data of Americans, these requirements exist for your system” makes sense This is exactly the stance taken by GDPR. Most devs don't like it from what I've seen on HN. (Saying this without any judgment. I am personally very much in favor of what GDPR does.)