GDPR is extraterritorial in nature and therefore it is even enforced in the US. The recent memorandum of understanding between the European Commission and the US government has ensured that the companies in the US should comply with GDPR when processing the data from European citizens.