From reading all these messages, I'm curious if an American couldn't try sending a GDPR deletion request by email to some of these organisations. Sure, it only

From reading all these messages, I'm curious if an American couldn't try sending a GDPR deletion request by email to some of these organisations. Sure, it only technically applies to European citizens, but it applies to them anywhere in the world — do they really have it on record that you're not one? And of course, if they do a Home Depot style block-all-EU-ip-addresses thing they probably wouldn't care. But in those cases they still break the law, they're just reasonably sure that it will never be enforced against them. I would imagine the potential legal risk for some orgs would be enough to make them comply, especially those with a European presence (and surely a university like Brown must have both at least one legal entity and enough alumni in the EU for them to count). The worst they could do is say no. it technically applies to anyone resident in the EEA and UK, as well as citizens of the EEA and the UK abroad