On my (and other's) current read, it only applies when you are resident in the EU. Specifically:

> It applies to all companies processing and holding the personal data of data subjects residing in the European Union, regardless of the company’s location.