[fenier]

Even if you do not have to comply with GDPR, 12 States have passed data privacy regulations to date. You may still need to comply with data protection law regardless if you qualify for various State laws.

Even if State law doesn't apply - you have have HIPAA, GLBA, SOX etc.

[db48x]

All irrelevant to the question. But it of course true that we have plenty of our own laws to follow.