It's an EU law but enforcement is up to the individual countries. Which is why Ireland keeps its own regulator on a tight leash - to keep the big US players there.