Any company processing data of a European citizen in the European Union is subject to EU law and any transfer of data outside the EU must meet certain adequacy standards. 

Brussels moves like striking cobra, looks to achieve October agreement.
Silhouette of spy discerning password from code uses a command on graphic user interface
The second round of negotiations on the new EU General Data Protection Regulation (GDPR) saw real movement on Tuesday, according to negotiators.
Sources familiar with the discussions told El Reg that a tentative political agreement has been reached already on Chapter 5 and Article 3. These two elements focus specifically on territorial scope and international data transfers.
Read more: http://www.theregister.co.uk/2015/07/15/negotiators_go_for_early_wins_in_new_eu_data_protection_law/
Posted by Dont Mine on Me