Earlier quoted context omitted.
GDPR tries to enforce its rules on servers outside of its territory. I'm still waiting to see how well that holds up in court.
It has held up quite well so far. https://www.pinsentmasons.com/out-law/guides/international-t...
I'll wait to see how it holds up when the EU tries to enforce it against a US website with no presence of any kind in the EU.