Nothing in GDPR says anything about EU citizens. Everyplace it talks about data subjects it talks about data subjects "in the Union". If he is not "in the Unio

Nothing in GDPR says anything about EU citizens. Everyplace it talks about data subjects it talks about data subjects "in the Union". If he is not "in the Union" and the processor or controller processing his data is not "established in the Union" then GDPR does not apply. See Article 3 [1] for details. [1] https://gdpr-info.eu/art-3-gdpr/ https://gdpr-info.eu/art-3-gdpr/