> Article 3(2), a new feature of the GDPR, creates extraterritorial jurisdiction over companies that have nothing but an internet presence in the EU and offer g

> Article 3(2), a new feature of the GDPR, creates extraterritorial jurisdiction over companies that have nothing but an internet presence in the EU and offer goods or services to EU residents[1]. While the GDPR requires these companies[2] to follow its data processing rules, it leaves the question of enforcement unanswered. Regulations that cannot be enforced do little to protect the personal data of EU citizens. I mean what are they going to do, invade Silicon Valley with their armed forces? It's not really enforceable. They can set up a firewall if they like and censor Facebook, that's the most they can do. And hee hee, the freedom-loving EU citizens will riot if they try to censor the internet, we all know that :) Checkmate, GDPR is not enforceable. The real way to solve the problem is the US should implement its own privacy laws, and preferably better ones than requiring some stupid annoying cookie popups.