regulation outside the US may not apply here but this is not how the law works in the EU, which deals with the data itself rather than just identification.
not too long ago I compelled a telco who had pissed me off to send me a 200 page dump of all the data they had about me and subsequently delete all of it, using the legal system after they had initially refused.
