The new European Privacy is global
The new GDPR (EU Regulation No. 679/2016), in force since 25.05.2018, also applies to not-European companies, institutions, organizations, which retain and process "European" data
See the article: The new European Privacy is global (ITA-ENG)