@Guzzist you have a point here. GDPR is a european legislation, applies to the whole EU, and stands model for the rest of the world.
I know also that it can be a pain to apply correctly and can hav negative consequences for "innocent" people and websites while it is targetting, amongst others, the big internet sharks that trade on private data