Well, according to what I could find[1], > Like the General Data Protection Regulation (GDPR), the US laws apply to where consumers reside, not where the compa

Well, according to what I could find[1], > Like the General Data Protection Regulation (GDPR), the US laws apply to where consumers reside, not where the company is headquartered. It doesn’t matter if a company doesn’t have an office in California if it has customers, website visitors, etc. that reside there and their personal information is being processed by the company. So, yes, if I was an EU company, I would need to abide by California privacy laws. Now IIRC there's some fine print in California's laws that says this only matters if the company is over a certain size, has a minimum number of CA users, and resells information. But that "filter" is also part of CA law, not EU law. QED :) [1] https://usercentrics.com/knowledge-hub/us-privacy-law-compliance-for-eu-companies/ https://usercentrics.com/knowledge-hub/us-privacy-law-compli...