It should be noted that I'm talking about the previous poster's proposal. The GDPR doesn't demand that; it specifically says that simply being available in the EU does not automatically make it fall under the regulation.