It depends, if they have a (tax) subsidiary company in the EU like Apple and Facebook in Ireland, of Alphabet in the Netherlands, some of their revenue might be within reach of GDPR fines, Fines that can amount to 4% of annual global turnover per incident.