GDPR can affect businesses in the United States (or any other location) if information is held by that business in the EU.  GDPR is concerned with information held within the EU as opposed to the nationality of any citizen it affects.