He's right though, the EU can do nothing in that case. Quite literally nothing. There is no law to abide because you don't "care" about it and there are no consequences.
Practicality > useless laws
Practicality > useless laws
The Deloitte page I linked to gives a Chinese web store located in China with no EU presence as an example.
It's bonkers that the EU thinks they can enforce their laws in a situation like that. But then, that's why it hasn't been tested.
It's basically a 'feel good' law with no teeth (at least the extraterritorial aspects).
It will drive Europe to a sort of digital isolationism where offshore companies will either a) dismiss and continue b) cease operations there.
I think it's like I said, it's a lot of "feel good" laws.
> It will drive Europe to a sort of digital isolationism where offshore companies will either a) dismiss and continue b) cease operations there.
I think it's more likely the US adopts a softer version of the GDPR, and it will be the EU and the US and the Commonwealth countries vs pretty much other more restricted Internet 'islands'.
I really hope we have a working decentralized alternative before that happens. It's something I want to start contributing to later this year, because I think it really needs to be a priority.