GDPR can apply extraterritorially but not to the extent you're suggesting.
For example, I am an EU citizen living in Canada. GDPR does not apply to any company interacting with me. However, for a US citizen living in an EU country GDPR would apply to every company they interact with. Even US based companies.
For example, I am an EU citizen living in Canada. GDPR does not apply to any company interacting with me. However, for a US citizen living in an EU country GDPR would apply to every company they interact with. Even US based companies.