No, the GDPR does not apply to EU citizens in the US. The location of the data subject, rather than their citizenship, determines whether GDPR applies. EU citizens traveling to or living in the US are not protected by the GDPR.
GDPR’s extraterritorial scope means that businesses must comply with the GDPR in the US as long as they collect personal data from European Economic Area (EEA) residents.
Trusted by thousands of companies worldwide, Termly’s intuitive software generates legal policies and handles consent management for any business in minutes.
Termly allows our users to focus more on their business instead of spending countless hours figuring out data privacy compliance. - Jona, Senior Product Manager @ Termly
