[icebraining]

I think it's even less reachy than that - if a foreign multinational has a subsidiary in the EU, I don't think the parent company is covered by the GDPR unless they directly deal with subjects in the EU. So they can compartmentalize the parts of the company that must deal with the GDPR, by redirecting every EU user to the EU subsidiary.