Comment by magamind

GDPR applies globally to any company - there are no safe havens. If you keep data on an EU citizen then you must comply.