They can make the product according to rules that are imposed on them. One rule: allow privacy. Unless the privacy is not in the field of interest of both the producer and the EU