This is low-key one of the reasons I love being a dual-citizen. I hold an EU citizenship and use it regularly against companies.
Doesn’t the GDRP only apply if you’re living in the EU?
You just have to make the request when you’re in the EU…
But they can’t prove I’m not… and I have very strong evidence that I could be with the passport. It’s simple to say that you use a USA based VPN as well. Ultimately you don’t have to unconditionally prove that your in the EU… most companies don’t want to deal with the hassle.
Imagine living in the EU. GDPR is fun, but there are ways around it for companies.
I can see this going similar way like the useless do not call list. The legit companies that are operating in California getting clean and the scummy companies operating outside holding all the data and having a ball with them
So, is this any use against out of state or country actors ? Otherwise borderline useless, the scum will move.
Companies are only allowed to operate within a given state if they comply with the laws, so a company unwilling to play by the rules will be committing financial suicide by losing business opportunities in the biggest tech industry state.