Do you also block all US IPs to avoid patent infringement claims? What makes you think the GDPR is broader in scope than the patents the USPTO hands out? In the patents' case, there is even a direct financial incentive for companies to sue you, whereas in the GPDR the interest of the regulatory body is primarily compliance.