In reply to Carl Hancock.

@Carl Hancock,

If the EU GDRP rules were not being applied internationally and only applied to EU based businesses and site owners I would have a different opinion on this.

I believe you. But (even apart from the mechanism for information and enforcement which Heather Burns has already explained) you'd be wrong to distinguish such laws based on such a criterion. Why? It's simple.

Really, your whole argument boils down to this one point: people shouldn't be at "risk [of] being exposed to legal action for something they wouldn’t even know existed." The trouble with that point, though, is that it applies to every single bit of law ever created.

No law has ever been known and understood by everyone to whom it applied. And the person doesn't exist who knows all the law that applies to them. The source of the law is irrelevant. So to bring it up about the GDPR specifically is a complete red herring.