Nothing will happen to companies outside the EU. You can violate GDPR freely.

There is no possible way they can enforce any law, fine or penalty outside their borders. They won't even try.