Second, it seems to be a popular misunderstanding, that GDPR affects Europeans everywhere they go and you need person's confirmation to store his data. It affects people currently located in Europe, and there are listed multiple very vague excuses for storing user's data without explicit consent, like "in order to protect the vital interests of the data subject or of another natural person", with which global tracking by law enforcement agencies could be easily justified.
On a more serious note; stuff like the US amendments is often already included in the base law (the generic name for constitution) as they are much older than the US. The times where the base law was somewhat more moldable (like before widespread literacy) made that possible. For example, freedom of religion is pretty universal, except in countries where a ruling religion exists which inherently to the religion bans all others. Arms are usually removed from base laws a few hundred years in as they directly conflict with the laws that ban killing people.
https://www.lufthansa.com/us/en/Data-collection-for-the-USA
https://www.dw.com/en/eu-us-strike-deal-on-sharing-transatla...
And all in the name of combating terrorism.