What if a EU sitizen uses a VPN to use a non GDPR conform service? What's with the California Online Privacy Protection Act? You have to comply to that. And from there it's not such a big step to comply to GDPR. Not?

https://en.wikipedia.org/wiki/Online_Privacy_Protection_Act

Edit: Apprently, there is a new one on its way: https://eu.usatoday.com/story/tech/talkingtech/2018/06/28/ho...