If a law says a company doing buisness in EU may not track users with face recognition, then you surely could charge them, if they merely outsource to outside o

If a law says a company doing buisness in EU may not track users with face recognition, then you surely could charge them, if they merely outsource to outside of the EU as they are still the ones ordering the illegal surveillance.