In reply to Dale Reardon - My Disability Matters.

GDPR applies to the personal and sensitive personal data about anyone in Europe regardless of citizenship or nationality.

Anyone collecting, using, or obtaining this data needs to comply with GDPR regardless of their location.

Any non-EU business which does not think it's obliged to follow these rules should not be doing business with European customers.