@eattard - I think it’s interesting that they mentioned the example of the EU citizen in Canada. According to everything I’ve seen about GDPR, this wouldn’t actually apply because the law only is for data collected in the EU. So, EU citizens aren’t covered when their data is collected when they are outside of Europe.
Source: Does GDPR apply to EU citizens in the United States - ComplianceJunction