[M2Ys4U]

The GDPR has absolutely nothing to do with citizenship, I don't know why this myth won't die.

It applies when you process data about people physically in the EU (whether they're citizens, residents, on holiday or just transiting through) or if the person/company doing the processing is based in the EU.

[jkaplowitz]

Quite a lot of seeming authority figures do repeat the myth, that’s why. You’re entirely right that it’s false.