> One of the commonly noted aspects of the GDPR is that it attempts to exert extraterritorial jurisdiction on any entity processing the data of an EEA resident,

> One of the commonly noted aspects of the GDPR is that it attempts to exert extraterritorial jurisdiction on any entity processing the data of an EEA resident, even if the entity itself has no assets in the EEA or other relation to it. First paragraph.. already plain wrong. The GDPR only applies, if the site is offering goods or services to relevant citizens. That's quite a fuzzy criterion, though. To remedy the fuzziness, support documents list various criteria like: offering payment in Euros, having representation within the EU, using an EU ccTLD, and so on. See also page 17 and following: https://edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-32018-territorial-scope-gdpr-article-3-version_en https://edpb.europa.eu/our-work-tools/our-documents/guidelin...