You will need to have a lead regulator (or I suppose a Privacy Shield listing while that is still legal) if you are doing significant business with EU data subjects’ personal data. See recital 80 and article 31 of the GDPR.