Well, I expect this sort of activity to escalate over time. Unfortunately our government advice appears to be that we should comply if we "offer goods and serv

Well, I expect this sort of activity to escalate over time. Unfortunately our government advice appears to be that we should comply if we "offer goods and services in the EU", or "monitor the behaviour of individuals in the EU.": https://www.oaic.gov.au/privacy/guidance-and-advice/australian-entities-and-the-eu-general-data-protection-regulation https://www.oaic.gov.au/privacy/guidance-and-advice/australi... I have no idea what would actually happen if they decided to fine an Australian entity.