Hacker News Reader

So find at least one EU citizen in their database and unleash the GDPR against them?

How would an EU law apply to a U.S. company if it has no assets or operations in an EU jurisdiction?

It applies if they work with PII of EU citizens. It might be to difficult to enforce the rules, but that is a different matter.