A EU court can just order a whole-EU dns block for your site and any related urls and you would be incapable of serving any person from EU. If you have a big share of profits from them you will lose everything. Maybe for you it's ok, but for many business it would be a total disaster with a fine on top of it (if they want to get back the right of serving eu users) very big considering your "malicious intentions" would be evident
I already covered that in my post. I very clearly said that you should only comply if you have business interests in the EU. A Canadian recipe site is unlikely to have to be concerned with such a thing; that's similarly true for the majority of all sites on the planet. They can freely disregard EU laws, so long as they have no business interests in the EU.
The majority of all sites will never comply with GDPR, they will never concern themselves with it at all: because it does not apply to them if they're strictly operating outside of the EU.
If 18 US states decide to implement their own unique privacy laws, you know what isn't going to happen? Every site on earth outside of the US is not going to rush out and try to comply with every aspect of those 18 unique privacy laws. Because that would be insane.
> A EU court can just order a whole-EU dns block for your site and any related urls and you would be incapable of serving any person from EU.
I also covered that in my post. The sole means for the EU to practically enforce its policies globally, is to put up a Chinese firewall and very aggressively censor everything that people in the EU can see. If the people of the EU want to live like that, that's their problem. If you're a big service, of course they can specifically target you for DNS blocking, and that still only matters if you're doing business in the EU.
They could do that, but it's certainly not within the scope of the GDPR - member states can issue fines and penalties, but if you have no assets in the EU that is the extent of enforcement i.e., none at all. The GDPR makes no mention about Chinese style firewalls or blocking European customers off from your business either, it is simply legislation for getting European businesses or foreign businesses operating within the EU to respect data protection laws.
The more realistic alternative to foreign businesses not cooperating with the GDPR is that European businesses will voluntarily choose to not do business with you as they'll share liability for your non-compliance.
The ideal approach is to disregard the EU's laws if you aren't governed by them (or don't have a very good reason to comply with them). What Web sites should do instead, is to not comply or censor, unless they are legally forced to under the jurisdiction of the EU.
There is nothing the EU can do to me, as an American Internet business owner, to force me to comply with their GDPR or this new filter law. They would stand no chance in an American court. The sole means to cut off EU users from my services is to put up a Chinese firewall in the EU and 1984 the people there behind it.
Sites & operators in Canada, or Brazil, or Australia, or Mexico, or Singapore etc are no more required to comply with EU privacy rules, as they are to obey the US Bill of Rights (or, the new California privacy law). Every site outside the US doesn't have to suddenly comply with California's privacy laws, or the privacy laws of Rhode Island. Acting from a practical basis, it strictly depends on whether you need to do business there. No average site can comply with every law in every town, city, state, province, country, zone, region, union around the world.
You can freely take on / allow access to EU users and entirely disregard the wishes of bureacrats in the EU, so long as you don't hold assets in the EU or do business in the EU. They largely have no means to enforce their policies outside of the EU, exactly as it should be.