I'm pretty sure this is right, except does geo-blocking legally release you from the liability of an EU citizen using a VPN?

1. From you own link:

> But the GDPR does not apply to occasional instances. Rather, regulators look for other clues to determine whether the organization set out to offer goods and services to people in the EU. To do so, they’ll look for things like whether, for example, a Canadian company created ads in German or included pricing in euros on its website. In other words, if your company is not in the EU but you cater to EU customers, then you should strive to be GDPR compliant.

2. As a general rule Europeans are MUCH less lawsuit addicted than Americans. Plus the way the GDPR works is that generally complaints are filed with a government agency that investigates.

You analysis starts from a position of deep fear.