Hacker News Reader

Would this mean all a non-EU website needs to do to safely serve GDPR-bound persons is trash any data collected from them?

Or not collect it in the first place. For those newspaper blocking traffic from the EU, it may be enough to remove all trackers