I strongly wonder how many US firms understand EU data laws... Isn't there a campaign against a small company called Facebook and their disregard for our laws?
If you want US firms to pay attention to EU data laws, you'd have to devote some real resources to enforcement.
From this side of the pond, these laws look like they're only very sporadically enforced, and only against large entities like Facebook who've got the legal resources to deal with the hassle. When viewed with typical American attitudes, that barely makes them laws at all - they're the equivalent of jaywalking in NYC.
I'm not sure you even need an EU company, just to be doing business in the EU.
An opposite example is Rovio in Finland are being sued under US patent law by some bunch of patent trolls or other (and it's the Finnish Rovio office rather than any US subsidy named in the suit).
From this side of the pond, these laws look like they're only very sporadically enforced, and only against large entities like Facebook who've got the legal resources to deal with the hassle. When viewed with typical American attitudes, that barely makes them laws at all - they're the equivalent of jaywalking in NYC.