Re: Cynical, me?
> A US citizen flies to France for a meeting, but his phone/laptop/whatever is set up in default full-snoop mode... Is he now subject to GDPR? Is his whole company?
GDPR applies to companies, not people; if he or she is a private citizen, then no they are not subject to GDPR
second, if they do business in EU or offer services to EU citizens, they are under the GDPR well before the cavity search by TSA of that US citizen
> Seems just easier to extend it to everyone until a court warrant says otherwise - at which point you at least have right intent on your side if nothing else.
that was the point of GDPR, so if US company shares data only because of a legal warrant, then that sharing is legal, even under GDPR; that being said, just keeping data obtained without consent and with no business relationship will incur fines under GDPR