But we get to "protect our companies" as a matter of policy.
Cool.
Just because many companies and startups are U.S.-based, does not mean that universal privacy laws/rights are targeting U.S. companies.
From my understanding, the GDPR applies equally to all companies, regardless of where they are founded.