[tutts]

Businesses don't have to abide by EU law when doing business with EU citizens, but when doing business in the EU. It's a small, but sometimes meaningful, distinction.

[shakna]

Check the GDPR. The EU requires certains things of businesses not in the EU, who interact with EU citizens.

[danieltillett]

Even worse it is EU residents and who may or may not be in the EU when they interact with you.