The last time I touched on this with our legal team (and it was not related to GDPR, it was just related to data storage of EU Citizens) the storage location was a very relevant key point.

Having said that, what about CDN's? I'm certain that lots of comment data is located in CDN's across the EU, US, and Asia.