I wonder what the minimum amount of work you have to do to get GDPR to apply to you. Is it EU citizens only? Or would residency work?

I doubt it, but it would be interesting if Estonia's e-residency thing would be enough.