@friend indeed, and it's not just EU citizens who get #GDPR protection but also all who live in the EU. So suppose an American moves to the EU & then demands that #EFX delete their data and EFX refuses. The legal battle would have to be in EU courts. If the court fines EFX, EFX has no incentive to pay, AFAIK. Which in turn means it doesn't even make sense to sue.