It's not so simple. A German citizen in the US is protected by the GDPR if he uses a EU company's service, even a US citizen in the US is then protected by GDPR.

Here it is the same, if he uses EU Google he is protected, because of the switch to Google Malaysia he isn't anymore.

I disagree, even EU companies don't have to adhere to the GDPR if they don't target EU countries. Google doesn't have to adhere to the GDPR for people in the US, whether they're EU citizens or not.

Companies have to, see Article 3. GDPR triggers whenever the processing is done by a company located in the EU or targeting users located in the EU.

Google probably does not as they surely don't do processing of non-EU user's data within their EU subsidiaries.

> Again, the GDPR applies to EU residents, not citizens.

But what's a "resident"? That means where you live, not where you're temporarily staying.

> A German citizen in the US isn't protected by the GDPR.

If he's just visiting the US he's still a resident of Germany, AFAICS.