I understand what the GDPR _says_, but I'm saying that there's a vast difference between "what it asserts it can enforce" and "what can actually be enforced". A

I understand what the GDPR _says_, but I'm saying that there's a vast difference between "what it asserts it can enforce" and "what can actually be enforced". A law that can't be enforced doesn't mean much. Governments enforce their laws with the threat of depriving you of your assets or personal liberty. In order to do that, they have to first have the power (via unchallenged jurisdiction) to deprive you of assets or liberty. In this case, unless the EU can get the US to enforce EU law on US soil, or to extradite offenders to the EU, the GDPR has no teeth.