I think the great thing of GDPR is that it brings the jurisdiction to wherever European citizens may be, or where the European citizen’s personal details could be collected, processed, or applied. That is pretty much everywhere, including in international space stations, I’m sure. It’s extraterrestrial in jurisdiction.