Hypothetically, how would a friend who lives in the US and happens to still be EU citizen be able to sue for GDPR violation? would there be any financial benefit involved?
They would only be able to sue if the processing occurred in the EU, according to the national law of the country where the processing occurred. Citizenship is not relevant; a U.S. citizen is entitled to the same benefit.