[bscphil]

I think the question everyone here is interested in having answered is "what if you don't?" The EU has no jurisdiction here (in my country); the law applies to the citizens of those countries. Sure, some countries might be willing to extradite you to the EU for breaking laws that apply there, but that seems rather extraordinary (in the case of a law that applies to internet sites), not to mention an outrageous abuse of power.

[ip26]

Presumably the main consequence is they shut down your business in their country, and if you dodge fines etc they don't let you come back.

Extradition would be quite reasonable if you were conducting a very large business, and/or ignoring significant laws, e.g. prohibition on human trafficking. But they aren't going to extradite you for failing to be GDPR compliant on $10 of app sales.