On what do you base that statement?
Just because many companies and startups are U.S.-based, does not mean that universal privacy laws/rights are targeting U.S. companies.
From my understanding, the GDPR applies equally to all companies, regardless of where they are founded.
