In order to collect, store and process data about people in the EU, you have to do so in a manner compliant with the EU law on that.
Collecting that data on a web page is a choice.
A semi-hidden security benefit of GDPR is that it makes people think twice before collecting and keeping data - you can't leak data that isn't in your database in the first place.
Does it really take that much of a leap of logic that if EU person sends data to a person in the US, that data is going to be stored on a server in the US?
>Does it really take that much of a leap of logic that if EU person sends data to a person in the US, that data is going to be stored on a server in the US?
Yeah, it does. A person in the US is not a server in the US. It's an iPhone in the US, not a server.
Does it really take that much of a leap of logic to understand that the server doesn't have to be on the same continent as the user?
Collecting that data on a web page is a choice.
A semi-hidden security benefit of GDPR is that it makes people think twice before collecting and keeping data - you can't leak data that isn't in your database in the first place.