I believe this is because GDPR rules apply regardless of nationality. I believe the law is location based (e.g. if you are a non UK/EU citizen but operate in t

I believe this is because GDPR rules apply regardless of nationality. I believe the law is location based (e.g. if you are a non UK/EU citizen but operate in the UK/EU, you'll have the law affect you. But if you were and EU citizen in say, South America, GDPR does not matter to you. (happy to dig up some legal documents by Allen and Overy a well-known law firm if people want to read an analysis).