I suspect that without global jurisdiction we would end up with data laundering jurisdictions, just as we have tax laundering ones today.
I suspect that without global jurisdiction we would end up with data laundering jurisdictions, just as we have tax laundering ones today.
And GDPR is not about the laws. It is about crooked people breaking basic human rights for their profit, every normal person should be glad that he has a straight (well almost :) ) directions how to respect and show respect for his customers. The attitude of "you cant force me" is fundamentally wrong.
One more thing, as a non european cityzen, I would be carefully monitor what the sites are doing with basic human rights (as now it will become evident) and protect myself from those who show their disrespect by not using their sites, services etc. Whole world will profit from this legislation and you can bet a lot of other countries will adopt it.
I suspect that has happened before. The tool to resolve these disputes is called diplomacy.
If we think of this as import/export it suddenly becomes more obvious - when importing or exporting physical goods from the EU, you have to follow EU law even if you're a non-national with no say in it.
(The example of US extraterritorialism I have is the other way round: https://en.wikipedia.org/wiki/United_States_v._Elcom_Ltd. ; as it says there, "it involved an individual being prosecuted for activities that were fully legal in the country where they occurred")
And why would I block EU ? Connection is intiated by user. So its user importing/exporting data from/to server jurisdiction. Why does not EU force their own citizens to not do business with those companies ?
This line of reasoning didn't work for the poker companies: https://en.wikipedia.org/wiki/United_States_v._Scheinberg
The US very definitely started the idea that it has global jurisdiction over the internet; why should it be the only such country?