Incorrect. With GDPR the EU extended their power to protect all EU citizens regardless of residency in, or out, of the EU.
Of course the EU will have trouble enforcing that protection against companies that don't operate in the EU. But the protection remains, even if it's practically unenforceable.
Of course the EU will have trouble enforcing that protection against companies that don't operate in the EU. But the protection remains, even if it's practically unenforceable.