American companies not complying with European law is quite common. That's not a problem as long as they and their owners don't care about doing business in Europe.

There's not a lot Europeans can do about it, nor is there much Americans can do about European countries doing things Americans don't like. Take, for example, the copyright lobby; they'd love to take down libdvdcss so you need to pay for licensed software to play DVDs on your computer, but French law allows them to operate freely.

Companies like Clearview (or YCombinator for that matter, as HN accounts can't be deleted), don't strictly need to comply with the privacy laws as long as nobody is willing to enforce them. Illegal (and unethical) as that may be, you'll have a hard time convincing any kind of European government agency to take action.