By what mechanism does GDPR jurisdiction bind data controllers that operate outside the EU?
<p>If you process the data of data subjects resident in the EU then you are supposed to be bound by the GDPR no matter where you are located.</p>
<p>Why care what the GDPR says if you don't have a presence in the EU?</p>

<h2>Because most countries enforce foreign judgements</h2>
<p>You get prosecuted in the EU and have a fine imposed. If you have no assets in that jurisdiction they give the judgement to a court in your jurisdiction which issues a local judgement and seizes your assets.</p>

gdpr european-union extraterritorial-jurisdiction