Hacker News Reader

well no, because they didn't actually release the feature, therefore no damage was actually done.

Presumably they have a lot of California users? Likely goes against CCPA as well.

If Triplebyte has no staff or assets in an EU jurisdiction, what could they do?

Setting up a country based IP filter is trivial if they don't want to serve EU and California.

They could filter traffic, but they might have some profiles for users who later moved to the EU.

But I'm asking whether GDPR authorities have any recourse to take against a US corporation that has not expanded into the EU.

https://gdpr.eu/companies-outside-of-europe/

If Triplebyte doesn't even do IP filtering for signups, they are servicing EU citizens. Actually I told them that I don't have US VISA, so the ,,local golf course we site'' case doesn't apply.