Why? That's already the case: US law applies to US citizens and there are already some laws that are extraterritorial and impose burdens that companies in other

Why? That's already the case: US law applies to US citizens and there are already some laws that are extraterritorial and impose burdens that companies in other countries must comply with. For instance, financial institutions in Europe have special reporting and KYC requirements for the accounts of American citizens, even if they're long-term residents in European countries and dual-citizens, because of FATCA. Extraterritoriality is not unique to the GDPR and the EU, nor is it new.