LinkedIn's new policy that goes into effect in May appears to grant GDPR-like permissions across all users, for instance, though it does specify that EEA countries may have additional rights under the law. I suspect the majority of companies will end up complying with GDPR globally.
There are additional laws that could protect citizens against overreach. But something like the GDPR alone would not do the trick.
This is especially dangerous given that there is already overreach in which data on the correlation of travel and behavior with crime, is being used to unlawfully detain people: https://www.npr.org/2017/12/05/568351544/teens-arrested-on-g... This data would only serve to multiply that problem. It's not an easy problem to solve.
Hopefully it affects U.S. policy in the next decade or so.
P.S. I'm curious how you found my city. LinkedIn?
https://www.theguardian.com/technology/2018/mar/16/silicon-v...
'“When you first get to Facebook you are shocked at the level of transparency. You are trusted with a lot of stuff you don’t need access to,” said Evans, adding that during his induction he was warned not to look at ex-partners’ Facebook accounts.'
It’s probably obvious but our best bet is in voting for Bernie Sanders.
...or with the large number of ordinary citizens who would oppose them or be indifferent to them. People here tend to have their privacy/safety balance set quite a bit more toward the "privacy" side than do most people.
Where most people draw the line, I think, is when surveillance is looking into their homes. Being surveilled when they are out and about in public does not bother them much.
GDPR enabled.
Anyway, the GSPR does not ban American-style surveillance in Europe. Most European countries have used the Snowden leaks as a blueprint to increase surveillance in almost every aspect, especially online and with many related obligations for Internet companies.
It’s possible (if unlikely) that after a militant based in Europe but geo-IP located elsewhere by accident notices something unsavoury and complaints, that companies implements an “Are you based within the EU?” toggle in account settings to avoid headaches.
For social services, I’m curious on how processes based on your friends’ will be implemented when your friends are partially in the EU and elsewhere. But I don’t expect this will be much harder than it currently is to circumvent, say, Netflix geo-blocks.