It's my understanding that companies only need to comply with GDPR when providing services to end users in the EU and that companies that comply with GDPR globally are only doing so due to resource constraints that Microsoft doesn't face.

However, I'm probably less informed on GDPR than the average HN user, so it's very possible that my understanding is off-base or incomplete.