The US used this against Rossmann GmbH, which was a German company, in Germany, selling cuban cigars to a German.
And they got cut off from PayPal, and the credit card networks for quite a while.
If the US can use it for selling a product in a store that’s entirely legal to sell under EU law, then the EU can also use the same rules for GDPR.