Blocking access to EU countries is an ass-covering fiction: GDPR protects EU citizens, irrespective of where they are.