If your U.S. website has visitors from the European Union, chances are your website privacy policy should cover the rights of those visitors (if any) under the GPDR. Don't assume that IP blocking visitors by country will prevent someone from the EU from visiting your website, particularly if they use VPN to access your site.