Why would GDPR apply to the internet archive? It's a US based nonprofit. As far as I can tell they don't do anything that even remotely hints at them providing services to EU residents (like offering their site in European languages, having the €-symbol somewhere on their donations page or any of the other more subtle things mentioned in GDPR).
I think he refers to the fact that each EU country notifies one official language and only UK picked English. But I guess they have found, or will find, a way to maintaing things as they are.
Who cares? Me posting my (very German) name and address on somebody else's website (blog comment, forum or whatever) doesn't magically make that person have to comply with GDPR.
According to [1] the law applies to:
1.) a company or entity which processes personal data as part of the activities of one of its branches established in the EU, regardless of where the data is processed; or
2.) a company established outside the EU offering goods/services (paid or for free) or monitoring the behaviour of individuals in the EU.
The internet archive doesn't offer goods or services in the EU (if you want to know how that's defined you have to read the actual law I'm afraid) and they're certainly not "monitoring the behaviour of individuals in the EU".
You are missing the point. The EU makes laws that govern - and at least try to - protect its citizens. If a document on the archive is created by a European citizen, then it is under EU law. That's why every company in the world right now that deals with European citizens is working on supporting GDPR. That also applies here.
Not quite. The EU might want that but it gets into jurisdiction.
The EU cannot enforce its law on entities that are entirely US based. It can only enforce it on non-EU sites if that site has some sort of business that’s within the EU (like offices or employees).
The EU can say that some businesses are so uncompliant with GDPR that they're not able to be used by EU companies. It seems weird to chose to limit your market just because you don't want to protect user data.
Not GDPR-specific, but France.com had its web domain seized by France recently[1]. It was a private US-based business (not a squatter) that the government of France had actually cooperated with for years, until they suddenly decided it violated French trademark law and seized the domain. The domain itself had been in one person's possession since 1994.
Enforcement of national laws is very much a thing across borders, so private businesses outside the EU are right to be apprehensive about what is going to happen as GDPR enforcement ramps up.
