[mtremsal]

To be fair, the GDPR extends to any company that processes personal information from EU subjects. It is raising the bar for most US companies.