IIUC, you can be a US expat living in the EU and the GDPR still applies. Even then a non-EU company may not explicitly target a EU audience but EU moral or phy

IIUC, you can be a US expat living in the EU and the GDPR still applies. Even then a non-EU company may not explicitly target a EU audience but EU moral or physical person may still find interest for whatever personal reason and still be protected by GDPR. As for jurisdiction, I suppose such conflicts are resolved using international law, but if a company is reachable from the EU by individuals protected by EU laws I’m pretty sure there is applicable jurisdiction (not saying it’s an easy thing)