Ignoring that the UK isn’t part of the EU, the EUs privacy laws extend to all European citizens, and it has treaties with most of the world (including the US) allowing it to enforce those.