Well, that's not true - they certainly can, and (as in this case) are going to, the EU GDPR restrictions on personal data privacy (starting from May 2018) will affect many, many non-EU companies, starting from the largest global ones.

Perhaps you meant to say that other countries shouldn't enforce their laws just because you communicate with their residents?