> If the Data Subject, moves out of the EU border and say becomes an expat, or goes on holiday then their personal data processed under these circumstances is not covered by the GDPR and they are no longer a Data Subject in the context of the GDPR, unless their data is still processed by an organisation "established" in the EU.
Good luck enforcing EU laws in the United States - I'm sure our government would be thrilled to extradite US Citizens (who have never been to the EU) for GDPR violations.
