The GDPR investigation into Lusha Systems Inc. isn’t just a European affair — it’s a wake-up call for U.S. companies worldwide. The notion that European privacy laws only apply if you open an EU office is dangerously outdated.