CJR seems not compliant with GDPR. Do they think that the content should be delivered to all the world to read? The big newspapers have taken GDPR seriously as

CJR seems not compliant with GDPR. Do they think that the content should be delivered to all the world to read? The big newspapers have taken GDPR seriously as probably other regulations and are safe to be seen around the world or send you to a page were explains why you cannot see the content. Why do so many small companies think that they have the right to sell their content worldwide without following local laws? (To be fair some big companies think the same) "Columbia University and authorized third-party service providers collect information about users’ activities and experiences while visiting a Columbia University website." I do not agree to third parties having my data. Where I can opt-out? Where can I delete my data? Will I be notified if there is a data leak in less than 72 hours of the discovery?