As of May 2018, with the entry into application of the General Data Protection Regulation, there is one set of data protection rules for all companies operating in the EU, wherever they are based. https://commission.europa.eu/law/law-topic/data-protection/eu-data-protection-rules_en