>GDPR is the European privacy law. It protects European citizens The GDPR does not discriminate based on citizenship. It applies if the organisation providing

>GDPR is the European privacy law. It protects European citizens The GDPR does not discriminate based on citizenship. It applies if the organisation providing the service is in the EU/EEA* OR if the user of the service is in the EU/EEA* (to the extent that the data reference their activity in the EU/EEA). And the UK, but thanks to brexit there's a parallel UK GDPR in place so... take that in to account.