> Those laws apply to US citizens. GDPR purports to apply to everyone around the globe. No, not to "everyone", only processors handling data that is covered as

> Those laws apply to US citizens. GDPR purports to apply to everyone around the globe. No, not to "everyone", only processors handling data that is covered as part of GDPR, which again, you are free to exclude if you desire. So, to stay with US laws, what about, as one of a few examples, FATCA [0] in the case of US citizens being served by, e.g., EU financial institutions? Very much comparable to GDPR and non-EU processors handling data covered by GDPR. Both apply outside their government of origin for processors handling something connected to the government's citizenry, and both do not "apply to everyone around the globe"; simply don't handle US financials/EU data. Again, GDPR is not unique in regard to extraterritoriality, nor is this something only the EU engages in. It is accepted, established and has been part of US legislation for an extended period prior to GDPR. And, just like with GDPR, FATCA applying beyond US based institutions is a positive attribute of that legislation, neither would work if only applicable within their respective territory. [0] https://www.law.cornell.edu/uscode/text/26/1471 https://www.law.cornell.edu/uscode/text/26/1471 https://www.law.cornell.edu/uscode/text/26/1472 https://www.law.cornell.edu/uscode/text/26/1472 https://www.law.cornell.edu/uscode/text/26/1473 https://www.law.cornell.edu/uscode/text/26/1473 https://www.law.cornell.edu/uscode/text/26/1474 https://www.law.cornell.edu/uscode/text/26/1474