GDPR claims to apply globally, in the same way Windows believes it owns the whole computer, but I'm actually running it in a VM. The actual boundary of GDPR is

GDPR claims to apply globally, in the same way Windows believes it owns the whole computer, but I'm actually running it in a VM. The actual boundary of GDPR is the intersection of where it says it applies (everyone in Europe and European residents everywhere), where it can be enforced (in Europe, mostly, against European business entities), and what judges will actually rule on (probably not Europeans overseas who misrepresent themselves as locals)