Actually, it could be applied in an extraterritorial way. The GDPR applies to processing of data of individuals located in the EU/EEU and states the rights of

Actually, it could be applied in an extraterritorial way. The GDPR applies to processing of data of individuals located in the EU/EEU and states the rights of these "data subjects". If your business violates the GDPR and wishes to also operate within the European Economic Area, it could face fines and penalties.