> The GDPR does apply outside Europe
> Suppose you run a golf course in Manitoba focused exclusively on your local area, but sometimes people in France stumble across your site. Would you find yourself in the crosshairs of European regulators? It’s not likely. But technically you could be held accountable for tracking these data.
This is why a number of US sites have decided to just not do business in Europe and just outright block it, which I think is an entirely fair decision.
The thinkpenguin people seem to want to eat their cake and have it too.
However, I think the claim that they can go after a website even if that website does not do business in Europe is entirely unreasonable.
I get what you mean, but how else would you frame it? How would you prevent e.g. Google from setting up all their servers in the US and simply saying "nope, we don't do business in the EU"?