I don't personally believe anyone needs to actually implement GDPR unless they have a company registered in the EU.

I do believe in privacy and the general intent of GDPR, but EU laws shouldn't take effect outside their jurisdiction any more than Iranian laws or Chinese laws.