Comment by tzs

> GDPR applies whenever you're providing services to EU citizens

That's a common misconception. GDPR applies to the data of people "in the Union". There is no mention of citizens at all in GDPR.

If someone is not an EU citizen but is in the Union, it applies.

If someone is an EU citizen but is not in the Union, it does not apply.