[ThrustVectoring]

GDPR applies, it has worldwide scope for data on EU citizens. On the other hand, European courts lack jurisdiction to enforce their laws on companies without EU offices and assets.

FWIW I'm really glad that EU courts lack this jurisdiction - any gain from privacy would more than be wiped out from losses to free speech, especially with the extensive history of libel tourism.

[tzs]

> GDPR applies, it has worldwide scope for data on EU citizens

Not quite. It applies to people who are "in the Union".

There is a very large overlap between "EU citizens" and people "in the Union", so most of the time there is no need to make the distinction but it is there.

[garmaine]

It’s hard to make an argument for the EU courts having that jurisdiction without also granting the same to Saudi Arabia and China.

[himinlomax]

The way it works is that the EU fines their EU-based operations or stops them from operating in the EU. And if they don't have any, those of their customers who do could not legally acquire their data on EU citizens without the subject's informed consent anyway.