[AmericanChopper]

I’m asking you to prove a negative to demonstrate that no US company could adequately assess their exposure at present, and they certainly couldn’t do it for free.

You seem to not understand that one of the core principles of the GDPR is that the EU intend to enforce it in all jurisdictions. Which they can do without an armed invasion using trade treaties, and instruments such as the New York Convention. For any entity anywhere in the world that doesn’t do business in the EU, blocking the entire union is the most risk averse and cost sensitive option.