@friend indeed, and it's not just EU citizens who get #GDPR protection but also all who live in the EU. So suppose an American moves to the EU & then demands that #EFX delete their data and EFX refuses. The legal battle would have to be in EU courts. If the court fines EFX, EFX has no incentive to pay, AFAIK. Which in turn means it doesn't even make sense to sue.
@friend So apparently EFX can ignore GDPR requests, unless I'm missing something. kravietz just pointed out that EFX operates in the UK, which normally would imply a real need for them to obey EU law, but with #brexit behind us it seems EFX has little incentive to follow the GDPR.