If a US multinational is handling data ostensibly subject to EU regulations, and using employees in developing countries for the lowest possible cost, they may or may not abide by the letter of EU law, but I think they evade the spirit of the law as a matter of course. There are some senseless "fig leaf" procedures that they use.
