Comment by astro_robot

That's actually not true in terms of the GDPR. A company, simply, only needs to have an EU citizen as a customer for the company to be regulated by the GDPR. [1]

[1] https://www.forbes.com/sites/forbestechcouncil/2017/12/04/ye...