[bluGill]

Check with a lawyer for details, but the best way to describe it is the EU can do little about data once it is outside of the EU: their laws don't apply elsewhere. They have ways around this.

If you have a EU presence (ie an office) that presence gets into trouble if data is sent outside the EU without a lot of care - this includes care to ensure the foreign government of where you send the data won't get it (which makes most companies not transmit data outside the EU if at all possible).

None of the above applies to this case though because presumably it is the person in question sending his own data outside the EU. There isn't much they can do about that.

[yiyus]

> None of the above applies to this case though because presumably it is the person in question sending his own data outside the EU. There isn't much they can do about that.

Not at all. The problem here is that the Catalan government took advantage of their power position and used official data to fill the database of this "digital republic". This is precisely what this law disallows. They can still hold servers where citizens enter their own data.

[bluGill]

I stand corrected