I’m not talking about who is in breach or not, I argued about the jurisdiction of the court, which they ruled that the law does apply to Clearview (even if it wasn’t breached). It’s literally in the article, maybe you should read it?
Also, foreign companies saving any data on EU citizens who reside in the EU are subject to the GDPR, see this webpage set up by lawyers who actually know about this stuff:
“The law is structured in this manner so that it can safeguard the data and privacy rights of all internet users in the EU, regardless of where they browse online or purchase. Therefore, if you conduct business with EU citizens, you must comply with GDPR.” reciprocity.com/…/guide-to-gdpr-compliance-for-us….
And the French also brought a case, precisely because the law does apply and they have jurisdiction. So thanks for proving my point I guess?