The question rather should be, why is nothing being done about those breaches in the UK. Passing legislation to firewall non-compliant sites shouldn't be difficult... unless it leads to outrage from the populace I suppose.