Maybe so, but I’m not going to let every random bureaucrat around the world with an inflated sense of their importance dictate how I do business. If their enforcement mechanisms become such that I need to worry about it, I’ll do so then.

Unless you think that the EU is going to monitor every website on the internet and magically divine who owns them and what they’re doing behind the scenes with user data, and then develop a blacklist for those people so they can’t travel or they can go after them after WW3?

I guess I’ll really regret it if that’s the case. Until then, I’ll ignore.

Not how it works, but you show an attitude that is clearly hobbyist/freelance, which is fine.

Enterprise and anything related to big money cares. Not like the EU is a small market.

You'll also be surprised how much the US and EU cooperate, legally and economically. MS, Google, FB,... endless legal resources and yet the EU hammer is inescapable.

The most interesting thing to me is how you don't see the opportunity that GDPR represents to MAKE money. We're all raking in contracts and work consulting clients and updating products - but hey, I guess you don't want to compete. Good luck!

Ouch. You’re probably right about the hobbyist mindset. If I were responsible for a large enterprise I’m sure I’d be more circumspect about the stewardship I’d have over the company, employees, and customers. I hope that wouldn’t mean I’d decide it was fair and reasonable, just that I’d be more constrained on a practical level.

But I’m not, so...

Regardless, I have no interest in consulting to help companies solve an invented problem based on a bad law. I make plenty of money without making the world a worse place.

Well, good luck with thst, but the world is full of random bureaucrats who can make your life massively difficult. It might or might not be right or fair, but it is and you play pretend at your own peril. Right now monitoring all sites can’t work, but how about five or ten years? Bureaucratic institutions can have very long memories.