Cool, I'm sure Tea is only available to report things about United States citiz... nevermind.
It runs afoul of about a dozen european rights to privacy, imagery and consent laws. And that's just by posting pictures ! Libel and slander are a bunch of others, right to a response is also another... the list is long. It is, once again, yet another dudebro trying to skirt legality.
The EU is welcome to try to enforce its local laws on the US operations of a US business open only to US users, but I don’t think its going to have much success.
https://www.edpb.europa.eu/system/files/2024-10/edpb_2024041...
That boat already sailed and it already happened. "US only operations" does not matter (which is already bullshit, as Tea does not verify that users are US ones, they merely disabled downloading in the play/app store): posting pictures of European citizens runs afoul of European laws. Sure, they can't come and arrest you on US soil. Just don't travel too much.
The document you linked is interesting but I'm skeptical that you actually read it. It effectively says that in practice there's no hope of enforcing actions against entities that are purely in the US unless their behavior has run afoul of state or federal policy.
It does note that if concrete damages are recognized by the court that there is a decent chance US courts will cooperate to enforce the judgment. But the vast majority of GDPR enforcement is punitive as opposed to compensatory so it's not particularly relevant.
I'm also not clear why you think traveling would matter. DPA penalties are administrative in nature, not criminal. They are also likely to be levied against corporations as opposed to individuals. My guess is that the extremely unlikely worst case is your entry or visa application getting denied.
Needless to say, I am very happy about making the US eat shit.
Tea can collect and use photos of EU citizens, if it collected them in the USA, with (all other things being equal) no fear of GDPR violations.
So, yes Facebook can't collect photos of EU citizens, then process and do "stuff" with them in the USA, without violating GDPR, because that'd be the easiest out ever for multinational tech companies.
It is the location of the subject of the personal data collection that matters, not their citizenship.
Steam tried this stuff on in Australia too, saying it had no presence there, but still sold games to Australians. In particular, they didn't want to honour Australia's consumer rights laws regarding refunds. They fought hard in the courts and lost, and it improved steam for almost everyone.
Big tech try on these jurisdiction arguments all the time, but they've repeatedly failed where you are selling goods to, or providing services to, people in those jurisdictions. The US does the same thing. If you sell or provide services to someone in XX state, you need to abide by the consumer laws (and maybe privacy if it is a state like CA) of that state.
This is one of the reasons paypal and Escrow.com have had a competitive advantage. It is hard getting money transmission / escrow licenses in all 50 states like they do. There are many such examples.
Valve did not want to give up its Australian income stream, which is why it went to court.
Two Germans shooting each other in Australia break Australian law, but not German law.
Its the only country in the world where Tea operates or is open to users, what other country’s laws do you think apply to it?
But if your proposed concept of “revenge libel” laws are just, as you say an added penalty for a subset of existing libel offenses, then while they might add more severe sanctions, they don't change the scope of what is prohibited, so they wouldn't change the calculus on whether anything is illegal.