That is not a commonly held interpretation of the law, especially if the entities collecting & processing the data are not in the EU.