So a US company providing services to a US naturalized citizen in the US that is also a dual citizen of a country in the EU makes the company liable to follow these regulations?
That makes no sense.
This sounds unenforceable.
That makes no sense.
This sounds unenforceable.
The next fun job is working out how to remove the data from all your backups when you get a removal request.
I have taken the approach that I will comply with the general intent of the GDPR (which I did long before it existed), but not try to apply the ridiculous parts.
You're going to have to provide proof to back up that statement.
"The principles of, and rules on the protection of natural persons with regard to the processing of their personal data should, whatever their nationality or residence, respect their fundamental rights and freedoms, in particular their right to the protection of personal data.”
0. http://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX...
Yes the regulations make no sense and they really aren’t enforceable outside of the EU.
I think it's both.