[laaph]

This is quite incorrect. However, a US citizen residing in EU will be covered by GDPR.

But EU citizens residing in non-EU countries are not.