The GDPR is an overreach as evidenced by the OP kvetching about why a foreign country does not comply with his country’s regulations regarding cookie use.

What’s the corollary for the patriot act? AFAIK, its provisions would only affect immigration and travel, which happen inside a country’s borders.