> Any idea how GDPR works for EU citizens who reside in the USA? It doesn't. The cases it applies to are given in Article 3 [1]. It applies to these cases: •

> Any idea how GDPR works for EU citizens who reside in the USA? It doesn't. The cases it applies to are given in Article 3 [1]. It applies to these cases: • Processing of personal data by entities that are "established in the Union", regardless of where the processing takes place. • Processing of personal data of "data subjects who are in the Union" by entities not "established in the Union" if it is related to those entities offering goods and services to data subjects "in the Union" or those entities are monitoring behavior of those data subjects that takes place "in the Union". • Processing of personal data by an entity not "established in the Union" is they are somewhere where Member State law applies "by virtue of public international law". (Anyone happen to have a list of such places?). GDPR does not even mention "citizens". Every place it talks about data subjects it uses "in the Union". Note that this works both ways. People who are not EU citizens are covered if they are "in the Union". [1] https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/