Note - IANAL I deal with the question all of the time. My general, non legal view, is the following: - If your economics operate outside of the EU (e.g. you a

Note - IANAL I deal with the question all of the time. My general, non legal view, is the following: - If your economics operate outside of the EU (e.g. you accept money from non EU, have offices outside of EU, etc.) then you don't need to comply, however the process to comply isn't entirely all that hard to do (see point #2). - GDPR is easy to comply with because you're either (1) at a scale where you have global operations so you're already or (2) you're at a scale where you don't really matter to the regulation, even if you have EU citizens in your DB. - If you get acquired by another biz that has operations in EU (but you don't), then the overall entity likely becomes susceptible to GDPR This is based on not a legal review, but rather a logistical one. In other words, if you don't have operations in the EU how on earth is the EU going to penalize you. Are EU cops (which don't exist?) going to show up at your door to collect money?