Again, the GDPR applies to EU residents, not citizens. A German citizen in the US isn't protected by the GDPR.

Technically, it doesn't even apply to citizens, but to countries that the company markets to. The link explains all this.

It's not so simple. A German citizen in the US is protected by the GDPR if he uses a EU company's service, even a US citizen in the US is then protected by GDPR.

Here it is the same, if he uses EU Google he is protected, because of the switch to Google Malaysia he isn't anymore.

I disagree, even EU companies don't have to adhere to the GDPR if they don't target EU countries. Google doesn't have to adhere to the GDPR for people in the US, whether they're EU citizens or not.

Companies have to, see Article 3. GDPR triggers whenever the processing is done by a company located in the EU or targeting users located in the EU.

Google probably does not as they surely don't do processing of non-EU user's data within their EU subsidiaries.

> Again, the GDPR applies to EU residents, not citizens.

But what's a "resident"? That means where you live, not where you're temporarily staying.

> A German citizen in the US isn't protected by the GDPR.

If he's just visiting the US he's still a resident of Germany, AFAICS.

Is there any reason why e.g. you go for a holiday outside of EU your account is moved to that country (no more GDPR protection) and all of your data can(?) then be processed. When you come back within the EU GDPR-flag is set back to true.