Data doesn’t have rights; you as a human (citizen or resident of EU) have rights on your data.

So it’s retroactive.

So this covers the "right to be forgotten" part of GDPR. However, there are plenty of other parts -- like not using tracking cookies til you explicitly give permission, that most sites will likely implement just with geoip targeting.

> Would it be illegal to show facebook a fake id?

Facebook doesn't have much to do with that, the creation or possession of a fake ID can already get you in trouble even if you never use it at all.

This is highly dependent on where you live, better check your local laws.

> Would it be illegal to show facebook a fake id?

Almost certainly. That's lying for personal gain, i.e. fraud.

Disclaimer: I am not a lawyer. This is not legal advice. Don't do fraud.

i would guess they would do whatever the minimum is to stay "legal" and maximize profit... er i mean, "connecting people"

If being a citizen is enough, does that mean that someone who never set foot in the EU but has European parents (from a jus sanguinis jurisdiction) would also be covered?