From what I understand, it doesn’t matter that it is publicly accessible content, you still need consent from each individual that is a GDPR data subject before you process their personal information. It also doesn’t seem to matter whether it’s a US company that doesn’t do business in Europe, although you have to wonder what teeth the law has under such circumstances. IANAL though.