the GDPR doesn't care where the website is as long as it's accessible to EU citizens
it would be most amusing to watch the EU commission attempt to enforce its extraterritorial !bad, bad cookies! law against the US federal government on its own website
