Most likely nothing will happen - it us highly unlikely they could sue you (you are outside their jurisdiction) and those jurisdictions are not designed to block the Internet - and have bigger threats to worry about.
The bigger consideration is credibility if you have lots of customers from those juridiction.
https://gdpr.eu/companies-outside-of-europe/ is useful with respect to the what the EU expects. If you do not target people in the EU, or your org has less then 250 people and you don't misuse the data you are probably not even in breach of the law.
Likewise, per 1798.40 of https://theccpa.org/ it is highly doubtful this would apply as it only applies to large businesses operating in California the make a significant proportion of their money from tracking people. (Its designed to prevent a recurrance if the Cambridge Analytica scandal)