this is true, but kinda pointless, you are not gonna fight the EU over this...
Several countries in the EU (UK, Ireland, ...) can assign personal liability for intentionally ignoring privacy law, in which case someone in your company is basically going to end up a wanted man in Europe