But as shown with the EU's GDPR regulation, even if your data is outside the EU but some of your customers are inside they'll regulate to get you to abide by their laws anyway.
It's bloody ridiculous on several fronts.
If your data is outside the EU and you are not there either then GDPR is irrelevant to you no matter where your customers are (they may not be happy of course)