I'm tilted more towards the US being in the wrong here and should repeal some acts. I do agree with you that it applies to every website in the world when it co

I'm tilted more towards the US being in the wrong here and should repeal some acts. I do agree with you that it applies to every website in the world when it collects info on individuals located in the EU. Penalties only seem to occur if your business operates in the EU. So some subset of websites could ignore it I guess? IANAL. Edit: Also the more I read about the GDPR (and the CLOUD act), the more I'm in favor of it.