The EU’s Privacy Protections Must Extend Beyond Its Borders