I am not anti-gdpr. I am quite concerned about the side effects on the small guys. Its obvious that this law was targeted at larger companies. But its also obvious that it massively increases risk profiles for innocuous behavior.

This is a problem. And hey, as a person in the US, I have no representation to help address my concerns over the validity/applicability of the law.

I am not a fan of that.

Then again, I also don't like it when we do this to others. FATCA is an example of this, where US citizens seeking banking services were denied services due to the implied risk to the bank from non-compliance. They generally don't have much recourse either.

Extra territorial impacts are the result of bad laws. I like that GDPR gives control back to the users. I dislike that it opens up such a massive legal attack surface as to make things like running a forum dangerous.