Serious question but how are the ICO going to enforce the GDPR against a Canadian company?
Assuming Canada wants to trade with the Eu in future - quite easily.
Oh? The ICO is going to take the whole of Canada to task over the action of one company? Really? And when the Canadian PM tells the Canadian High Commissioner in London to have a polite (they're Canadians, they're always polite, even when they're telling you to rotate on a cactus) word with the MayBot, about what Canada will or will not buy from Britain if the ICO takes any action at all against the whole country for the actions of a single company, what do you really think the MayBot will do? Back the ICO, or ruin the relationship with one of the pillars of the Commonwealth? Things will get awfully lonely after Brexit...