Insane parts like being unable to use any American services, even though there are no EU based competitors that are viable to use, don't. Or perhaps it's now actually impossible for an American company to be compliant, in which case oh well. Good luck enforcing that against half of the internet.
I quite like the spirit of the original GDPR, but some of the more recent execution is just bad.
> perhaps it's now actually impossible for an American company to be compliant
If they store and process PII, then this has been the case since the CLOUD Act.
They can be compliant by not dealing with PII.
> I quite like the spirit of the original GDPR, but some of the more recent execution is just bad.
This particular bit of it is fantastic IMO. I'm still waiting for big fines or other punishments to happen though. Hopefully soon but I'm not holding my breath.
> even though there are no EU based competitors that are viable to use
Hopefully this will open up the market for companies based everywhere to compete against the US giants. Not just in the EU -- like I said, this is not about where the company is based, except in the case of the US where the CLOUD Act exists. That would be very healthy for the Internet.
Sure, if your company provides no web services, and doesn't actually have any customers, this is possible. For everyone else however, that is a ridiculous suggestion.
I quite like the spirit of the original GDPR, but some of the more recent execution is just bad.