> On the question of whether it will be worldwide I can only assume it will because anyone in Europe with a VPN will still be able to access the information falling foul of the GDPR.
That's not how it works at all.
You seem to be under the impression that the GDPR is about restricting Europeans' access to personal information, whereas it is about protecting Europeans' personal information.