[chgs]

Someone randomly walking into a Duane trade in Seattle and purchasing a device would not be reasonably coveted under the GDPR

However if 23&me were targeting European citizens that would be different.

Despite what the adtech industry likes to claim online, Bobs Burger Joint in Baltimore does not have to be specifically concerned about abusing their customers data even if a customer happens to be an EU citizen.

Now if they shipped frozen burgers to France online then sure they would. If they sold “merch” in euros they would. But a local store with a physical premises trading in person? Not covered.

A European citizen living in Austin buying from Amazon though, could well be covered. Amazon do target EU citizens