Yeah, but extradition treaties generally require "dual criminality", that the offense be a crime in both countries. If your offense wasn't a crime in the USA, then you probably won't get extradited; and if it was, then the USA probably has jurisdiction too (assuming you were physically here when you did it), so the USA can prosecute you itself.

The link to Mr. Love's case, or Mr. Dotcom's ongoing case clearly show being "physically here" didn't seem to factor into those requests.

Fair, and my reply was unclear. I mean that if the act is a crime in both countries, then it's a crime in the USA, so you'd be committing a crime with or without the GDPR.